danytrade.online
“Landing”
Evidence Summary
This domain, danytrade.online, is flagged as an active credential phishing site. Registered on June 24, 2026, through REG.RU LLC, the domain currently resolves to IP address 104.21.32.26, hosted on Cloudflare infrastructure in Canada. Analysis indicates the use of Cloudflare nameservers (grant.ns.cloudflare.com and hadlee.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). The site returns an HTTP 200 status, confirming its operational state as of July 12, 2026. Technical indicators reveal the deployment of Node.js, React, Next.js, and Webpack, alongside Cloudflare Browser Insights for performance monitoring. The domain is blocked by at least one security blocklist, and four of 91 security vendors on VirusTotal have flagged it as malicious. The page title, 'Landing,' suggests a generic entry point, though the exact content and targeted brand remain unconfirmed. No specific phishing kit or brand impersonation details are available at this time. Defenders should treat this domain as high-risk due to its recent registration, Cloudflare-based hosting (commonly abused for phishing), and confirmed credential phishing classification. Network-level blocking or monitoring of connections to 104.21.32.26 is recommended. Further investigation into associated infrastructure, such as linked domains or email addresses, may reveal additional threats. The domain remains active, and continued monitoring is advised.
Forensic History & Detection Timeline
-
VirusTotal Detections Update Jul 8, 2026 · 08:15 UTCVirusTotal scanner detections updated from 1 to 1. Added scanner alerts: LevelBlue.
Threat Response Pipeline
Public Blocklist Status
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not observed
- Cloaking score
- 0/6
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
Stored Capture · 2 sources
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 7 identified
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of danytrade.online · checked Jul 8, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive