p2pexchange-market[.]com[.]exchange-trademarket[.]com

Analysis of p2pexchange-market.com.exchange-trademarket.com shows that the domain was registered on 21 February 2026 and is currently taken offline. The site presents the generic directory index page titled “Index of /”, which offers no legitimate content and is a common placeholder used by malicious operators. The domain resolves to IP 198.12.80.250, an address owned by AS36352 (HostPapa) located in the United States. The hosting provider is a shared‑hosting service, which frequently hosts abuse‑related sites. SSL inspection reports a certificate identified as “R10”, indicating a low‑trust or self‑signed certificate.

The Gridinsoft trust score of 0 / 100 further confirms the lack of reputation. The domain appears on one security blocklist and is listed by PhishDestroy, reinforcing its classification as malicious. VirusTotal scans flagged the domain by ten of ninety‑three AV engines, providing independent detection of malicious activity. The intelligence labels the operation as a “Crypto Scam” that impersonates the cryptocurrency exchange MEXC, matching the brand target field.

The elevated risk rating reflects the combination of brand impersonation, low trust scores, and multiple vendor detections. While the site is offline, the infrastructure—particularly the shared hosting IP and the weak SSL certificate—remains reusable for future campaigns. Defenders should continue to block the domain at perimeter filters, monitor the hosting IP for new registrations, and add the domain to internal blacklist feeds. Additional verification of any future DNS resolution to the same IP should trigger alerts, and any email or web traffic referencing the MEXC brand from this host should be treated as suspicious.