lrade-zero-v2[.]pro

Analysis of the domain lrade-zero-v2.pro indicates it was established as a brand impersonation phishing site targeting x.com. Registered on February 21, 2026, through Eranet International Limited, the domain resolved to IP address 172.67.182.77, hosted on Cloudflare's infrastructure (AS13335) in the United States. The domain's nameservers, keyla.ns.cloudflare.com and lee.ns.cloudflare.com, further confirm its association with Cloudflare. At the time of assessment, the domain was offline, and no SSL certificate was present.

The page title 'Welcome to nginx!' suggests the use of a default or misconfigured nginx web server, which may indicate either an incomplete phishing setup or an attempt to evade detection by presenting minimal content. Despite the lack of an SSL certificate, the domain was flagged by 2 of 93 security vendors on VirusTotal, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as malicious. While the domain is currently offline, its infrastructure and registration details align with known phishing patterns.

Defenders should monitor for reactivation or similar domains leveraging the same registrar or hosting provider. The absence of an SSL certificate and the use of a default nginx page may indicate either an early-stage attack or an attempt to avoid automated detection. No further details about the phishing kit or specific attack vector are available at this time, as the site's content was not accessible for deeper analysis.