unitrade[.]limited

unitrade.limited was registered on 2026-02-21 through Atak Domain Bilgi Teknolojileri A.Ş. and is hosted on Cloudflare’s network (ASN13335) using the IP address 104.21.64.1 located in the United States. The domain resolves to Cloudflare edge nameservers darwin.ns.cloudflare.com and mallory.ns.cloudflare.com, and serves an SSL certificate issued by Google Trust Services (WE1). HTTP traffic is delivered over HTTP/3, and the only observed HTTP response is a 522 “Connection timed out” page title.

VirusTotal analysis recorded 14 of 93 scanning engines flagging the domain as malicious, and the domain appears on a security blocklist and has been blocked by PhishDestroy. The domain is currently offline, but historical activity indicates it was used for a generic phishing campaign. No branding or specific victim targets have been identified from the available metadata.

Defenders should add the domain and its associated IP address to deny‑list rules, monitor for new domains registered by the same registrar or using the same Cloudflare nameservers, and enforce TLS inspection to capture any future payloads should the site become active again. Continuous review of Cloudflare‑hosted domains that share the 104.21.64.0/24 block is recommended, as threat actors frequently rotate IPs within this range. Because the site is presently offline, immediate incident response is not required, but proactive blocking will reduce exposure should the operator reactivate the infrastructure.