realtrade5[.]com

Analysis of the domain realtrade5.com indicates a high-risk credential phishing campaign currently active as of July 12, 2026. The domain was registered on March 4, 2026, through the registrar Cosmotown, Inc., and resolves to the IP address 104.21.61.178. Infrastructure analysis reveals the use of Cloudflare services, which may obscure direct hosting details. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. The domain is flagged by 24 threat intelligence pulses on AlienVault OTX and appears on four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Detection engines on VirusTotal report 11 flags out of 95 vendors, confirming its classification as malicious. The page title, 'Realtrade5,' suggests an attempt to impersonate a trading or financial platform, though the exact brand target remains unconfirmed without further content analysis. Technologies detected on the domain include amCharts, YouTube embeds, Bootstrap, Smartsupp, Slick, Moment.js, jQuery, and Cloudflare Browser Insights. These tools are frequently used in both legitimate and phishing sites, providing no definitive indication of intent on their own. The Gridinsoft trust score of 0/100 further supports the assessment of malicious activity. Defenders should treat this domain as actively hostile. Blocking at the network level is recommended, particularly for organizations in financial or trading sectors. Given the domain's recent registration and consistent detection across multiple threat feeds, it is likely part of a broader phishing operation. Further investigation into associated infrastructure, such as the IP address and registrar, may reveal additional linked domains or campaigns. No evidence currently suggests takedown or mitigation efforts have succeeded, as the domain remains operational.