sentradefx[.]net

On July 25 2026 the domain sentradefx.net was observed as part of a generic phishing campaign targeting investors in digital assets. The site was registered on March 11 2026 through Dynadot LLC and resolves to the IPv4 address 193.23.118.71, which is hosted in the Netherlands under AS214036 Ultahost, Inc. HTTP service is provided by Nginx and the server presents an HSTS header. The front‑end stack includes Smartsupp and jQuery, and the site is protected by a Let's Encrypt R13 certificate. The page title returned by the server reads “Sentrade FX | Digital Asset Investment Strategies for Professionals and Beginners”, indicating an attempt to lure both professional and novice traders. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, suggesting malicious intent.

The domain appears on a single public blocklist and is listed as blocked by PhishDestroy. Nameserver records are ns1.srv30host.com, ns2.srv30host.com, ns1.ultaserver.net and ns2.ultaserver.net. As of the reporting date the site is taken offline, limiting immediate exposure but not removing the underlying infrastructure. Open questions remain regarding the exact payload delivered, credential collection mechanisms, and whether additional command‑and‑control hosts are associated with the same IP range.

Defenders should continue to block traffic to 193.23.118.71 and add sentradefx.net to local deny lists. Monitoring of DNS queries for the domain and its authoritative name servers is advised, as is periodic re‑scanning of the IP address for new services. Organizations that employ email filtering should ensure that any messages referencing “Sentrade FX” or related investment language are subjected to heightened scrutiny. Because the registration is recent and the hosting provider is shared, future campaigns may reuse the same infrastructure, so threat‑intel feeds should be updated accordingly.