frxoptmarkt[.]com

Analysis of frxoptmarkt.com shows a high‑risk generic phishing infrastructure that remains active as of the report date, July 27, 2026. The domain was registered through Shock Hosting LLC and created on April 29, 2025. Its authoritative name servers are ns1.shockhosting.com and ns2.shockhosting.com, both pointing to the same hosting provider. DNS resolution returns the IPv4 address 104.225.130.229, confirming that the domain is currently reachable.

The domain appears on a single public blocklist, PhishDestroy, indicating that at least one security community has identified it as malicious. VirusTotal scans show that 2 of 91 security vendors have flagged the domain, providing additional independent confirmation of its malicious nature. No further public reputation services, such as Google Safe Browsing or OTX, have been referenced in the available intelligence, so their status is unknown. The limited data set does not disclose the exact phishing payload, targeted brand, or page content, leaving those aspects unverified.

Defenders should block network traffic to 104.225.130.229 and add frxoptmarkt.com to internal URL filtering and DNS sinkhole lists. Continuous monitoring of the domain’s DNS records and any future VirusTotal scans is advised, as the threat landscape may evolve. Organizations using email gateways should enforce URL reputation checks and consider quarantining messages that contain links to this domain. Incident response teams should treat any credential submissions to the domain as compromised and initiate standard credential reset procedures.