trade-uni[.]xyz

The domain trade-uni.xyz was registered on February 21 2026 through NiceNIC International Group Co., Limited and is served by Cloudflare nameservers malcolm.ns.cloudflare.com and sydney.ns.cloudflare.com. DNS resolution points to IP 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site currently returns no SSL certificate, indicating that HTTPS was not provisioned before the host was taken offline. The HTTP response includes the page title “Suspected phishing site | Cloudflare”, a default block page displayed by Cloudflare when a domain is flagged for malicious activity. VirusTotal scans show that 13 of 93 security vendors have flagged the domain, demonstrating a moderate level of detection across independent engines.

AlienVault OTX lists the domain in one threat‑intelligence pulse, and PhishDestroy has added it to its blocklist, confirming that at least one dedicated anti‑phishing service treats the domain as hostile. Additionally, the domain appears on a separate security blocklist, bringing the total count of external listings to two. The available evidence points to a typical phishing infrastructure: rapid registration, use of a reputable CDN to hide the true origin, and reliance on Cloudflare’s default block page to signal abuse. No further content analysis is available because the site is offline and no SSL certificate or additional page metadata were captured. Consequently, the exact phishing lure or targeted brand cannot be confirmed at this time.

Defenders should block traffic to trade‑uni.xyz at the network perimeter and ensure that any client‑side security solutions reference the domain in their URL filtering or reputation lists. Monitoring for new DNS records or changes to the underlying IP address is recommended, as threat actors frequently shift hosting providers after takedown.