bmftradex[.]com

The domain bmftradex.com is currently active and has been observed in a single security blocklist. It is listed as blocked by the PhishDestroy feed, indicating that at least one anti‑phishing service has taken mitigation action. VirusTotal reports that two out of ninety‑one scanning engines have flagged the domain, suggesting that a minority of detection tools have identified malicious behavior associated with the host. The domain was registered on 15 February 2026 through the registrar Spaceship, Inc., and the registration record does not show any subsequent changes to the WHOIS data.

Authoritative name servers are webhosting3006a.trouble‑free.net and webhosting3006b.trouble‑free.net, both of which resolve the domain to the IP address 209.159.151.58. The hosting infrastructure appears to be a shared web‑hosting service, and no additional attribution such as autonomous system or geographic location is provided in the available data. Analysis indicates that the observed indicators—blocklist inclusion, PhishDestroy blocking, and limited vendor detections—are consistent with a credential‑harvesting campaign that targets users by presenting a deceptive login page. However, the public evidence does not contain details about the specific landing page content, SSL certificate, or HTTP response codes, leaving the exact attack vector and payload unclear.

Consequently, defenders should assume the domain is hostile and treat any traffic to it as potentially malicious. Recommended mitigations include adding the domain and its resolved IP address to local deny lists, updating proxy and firewall rules to block outbound connections, and monitoring DNS queries for look‑ups of the domain or its name servers. Continuous re‑evaluation is advised, as additional detections or blocklist listings may emerge.