# oneplustrade.io — SUSPICIOUS

> PhishDestroy investigates oneplustrade.io, a suspicious domain linked to phishing activity. Learn about the risks and latest status here.

## Summary
PhishDestroy identifies oneplustrade.io as an active domain exhibiting characteristics consistent with generic phishing threats. Currently, the risk level is classified as under investigation, signaling that further analysis is ongoing to determine the full extent of its malicious intent.

Although oneplustrade.io shows zero detections across 95 security vendors on VirusTotal, other factors raise suspicion. The domain was registered recently on January 6, 2026, through HOSTINGER operations, UAB, a registrar sometimes associated with fraudulent registrations. It resolves to the IP address 194.169.80.131, which is also under scrutiny. The domain’s youth combined with its registration details and active status form a basis for heightened caution despite the lack of direct antivirus flags.

Users and organizations are advised to exercise vigilance when interacting with oneplustrade.io or any communications referencing it. PhishDestroy continues to monitor the domain’s activity and recommends blocking or isolating it within security infrastructures until its safety can be conclusively verified. Staying informed and cautious remains the best defense against emerging phishing threats like those potentially posed by this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: One Plus Trade Limited – Cryptocurrency Arbitrage Trading

## Domain Intelligence
- Registered: 2026-03-08 13:07:01
- Registrar: HOSTINGER operations, UAB
- Country: LT
- IP: 194.169.80.131
- IP Country: GB
- IP City: Coventry
- IP Org: AS42831 UK Dedicated Servers Limited
- Nameservers: ns1.globaltohosting.com ns2.globaltohosting.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://i.ibb.co/WNDtZc9j/5d5422d32536.png
- Wayback Machine: https://web.archive.org/web/https://oneplustrade.io
- PhishDestroy: https://phishdestroy.io/domain/oneplustrade.io/
- LLM endpoint: https://phishdestroy.io/domain/oneplustrade.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/oneplustrade.io/
Last updated: 2026-03-19