certifiedtrade[.]net

This domain is currently active and has been identified as a high‑risk generic phishing infrastructure. certifiedtrade.net was registered on 2 November 2023 through Atak Domain. The authoritative name servers listed are ns1.hosting.markets, ns2.hosting.markets, ns1.sagaciousdns.com and ns2.sagaciousdns.co, indicating a split‑hosting configuration that may aid resilience. DNS resolution points to the IPv4 address 51.68.132.245, which is the sole host observed for this malicious activity.

Detection telemetry shows that the domain appears on one public blocklist and has been specifically blocked by the PhishDestroy service. VirusTotal analysis reports three of ninety‑one security vendors flagging the domain, confirming that multiple independent scanners have observed malicious behavior. No additional public reputation scores, Safe Browsing verdicts, or Open Threat Exchange (OTX) entries are presently available. The limited observable data leaves several aspects uncertain: the exact phishing payload, targeted brand, and the presence of SSL/TLS certificates have not been disclosed.

Likewise, the underlying web content and HTTP response codes have not been publicly analysed, preventing a detailed assessment of the site’s lure techniques. Defenders should add certifiedtrade.net to local deny lists, enforce DNS sink‑hole rules, and ensure that any outbound connections to 51.68.132.245 are blocked at the network perimeter. Continuous monitoring of the listed name servers and the associated IP address is recommended, as changes may indicate the deployment of new phishing pages. Organizations using threat‑intelligence feeds should prioritize this indicator given its high‑risk classification and the active blocklist status.