trade50vurna[.]com

Analysis as of July 24 2026 indicates that the domain trade50vurna.com was registered on February 21 2026 through the registrar Gransy, s.r.o. The domain resolves to the Cloudflare address 172.67.133.196 and uses the Cloudflare nameservers aryanna.ns.cloudflare.com and coleman.ns.cloudflare.com. No TLS certificate is presented, suggesting the site was served without HTTPS. The HTTP response presented the page title “Suspected phishing site | Cloudflare”, which is a default Cloudflare block page rather than content hosted by the attacker. The domain received a Gridinsoft trust score of 0 out of 100 and is listed on a single security blocklist.

PhishDestroy has already taken the site offline, and it appears on one additional blocklist. VirusTotal reports that one of ninety‑three scanned security vendors flagged the domain, providing an independent indication of malicious intent. AlienVault OTX includes the domain in a single threat‑intel pulse, further corroborating its association with phishing campaigns. The infrastructure is hosted behind Cloudflare’s AS13335 network in the United States, which masks the underlying origin server and complicates attribution. While the available data confirms that the domain was used for phishing and has been disabled, the specific payload, targeted brand, or victim demographics remain unknown because no content was captured beyond the Cloudflare block page.

Defenders should continue to block trade50vurna.com at perimeter defenses, monitor for any resurgence of the domain or its associated IP address, and include the domain in threat‑intel feeds. Given the low trust score, blocklist presence, and vendor flag, the domain should be treated as high‑risk and excluded from any allow lists. Ongoing observation of the registrar Gransy, s.r.o. for similar registrations is recommended.