shorttradingpol[.]com

Analysis of www.shorttradingpol.com indicates that the domain was registered on 19 May 2025 through Shanghai Meicheng Technology Information Development Co., Ltd. The authoritative name servers are ns-1238.awsdns-26.org, ns-2021.awsdns-60.co.uk, ns-254.awsdns-31.com and ns-574.awsdns, linking the zone to Amazon Route 53 infrastructure. DNS resolution points to the single IPv4 address 20.229.115.221, which belongs to AS8075, a Microsoft Corporation network located in the Netherlands. No TLS certificate is presented for the host, meaning HTTPS connections are unavailable and the site can only be accessed via HTTP. The page title returned from the live capture before takedown was "Short Trading", matching the declared scam type of a "Fake Exchange".

The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy service. Independent scanning on VirusTotal recorded a single positive detection out of ninety‑five submitted security vendors, reinforcing the malicious rating. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, indicating complete lack of trust. The current operational state is offline, which suggests the hosting has been withdrawn or the site has been taken down, but the infrastructure remains observable.

Defenders should continue to deny any outbound connections to 20.229.115.221, enforce DNS sink‑holing for the domain and its four name‑server records, and propagate the indicator set to internal blocklists and proxy filtering solutions. Monitoring for re‑registration of the same second‑level domain or similar patterns in the Shanghai Meicheng registrar should be part of ongoing threat‑intel processes. Because the site was identified as a fake exchange, any credential harvesting attempts targeting financial‑service users should be treated as high‑impact, and compromised credentials should be forced to reset.