trading212menkuldegerler[.]com

The domain trading212menkuldegerler.com was registered on July 28 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the IP address 172.67.174.119. The authoritative name servers are ethan.ns.cloudflare.com and nelly.ns.cloudflare.com, indicating that the site is hosted behind Cloudflare’s CDN service. VirusTotal scans show that 2 of 91 security vendors flagged the domain, suggesting the presence of malicious indicators. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy feed, confirming that threat‑intelligence communities consider it malicious.

The site’s status remains active as of the report date, August 01 2026, and no evidence of takedown or remediation has been observed. Analysis of the available data points points to a high‑risk phishing infrastructure targeting users of the “trading212” brand, as implied by the domain name. However, without a direct observation of the web content, the exact phishing vector, credential‑capture mechanisms, or associated payloads cannot be confirmed. The lack of additional public detections beyond the two VirusTotal flags and a single blocklist entry leaves the broader campaign footprint uncertain.

Defenders should block DNS resolution to trading212menkuldegerler.com at the network perimeter and add the domain to endpoint allow‑list exclusions. Monitoring of outbound traffic to the IP 172.67.174.119 is recommended, as Cloudflare may host multiple malicious sites on the same address. Organizations should also update phishing detection rules to include this domain and consider sharing any future observations with the PhishDestroy community to improve collective coverage.