urbantradeslimited[.]com

Analysis of the domain urbantradeslimited.com indicates elevated risk consistent with phishing activity. The domain was registered on March 11, 2026, through Ultahost, Inc., and was taken offline prior to this report. It resolved to the IP address 192.142.53.228, hosted in the Netherlands under AS214036 (Ultahost, Inc.), with nameservers ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, and ns4.ultahost.com. No SSL certificate was detected, increasing the likelihood of unencrypted data transmission, a common trait in phishing infrastructure. Detection data from security vendors is limited but notable: three of ninety-five vendors on VirusTotal flagged the domain as malicious.

The domain appears on one security blocklist, specifically PhishDestroy. The page title, 'urbantradeslimited.com,' does not provide clear evidence of a targeted brand or service, though the domain name suggests a possible focus on financial or trading-related fraud. Technologies detected on the domain include Bootstrap, LiteSpeed, Tiny Slider, Swiper, Smartsupp, OWL Carousel, jQuery UI, and jQuery, which are commonly used in both legitimate and malicious websites and do not inherently confirm intent. Defenders should treat this domain as high-risk due to its offline status, lack of SSL, and detection by multiple security sources.

While the exact nature of the phishing campaign remains unconfirmed, the infrastructure aligns with known phishing patterns. Network security teams are advised to block the domain and its associated IP (192.142.53.228) at the perimeter. Further investigation into related domains hosted on the same IP or nameservers may uncover additional threats. No evidence links this domain to a specific brand or scam subtype beyond generic phishing.