securetradex[.]com

PhishDestroy identifies securetradex.com as an active credential-phishing domain posing as a secure trading interface to harvest user credentials. The site’s false promise of safety masks its malicious intent: tricking visitors into surrendering usernames, passwords, or financial data. Technical indicators reveal a recently registered domain—created on December 18, 2025—combined with a low detection rate of 2 out of 95 VirusTotal scans, indicating evasion tactics likely in play. The domain resolves to 86.107.77.210 and is registered through NameSilo, LLC using a Let’s Encrypt SSL certificate, tactics commonly used to appear legitimate at first glance.

This domain was flagged during routine threat-hunting operations after matching known phishing patterns tied to financial impersonation. The absence of antivirus detections suggests attackers are leveraging newly registered infrastructure to bypass early-stage filtering. While the risk level remains under investigation, the site’s active status and targeting of trading credentials demand immediate caution. Registrar details and IP attribution provide concrete evidence of its recent, likely opportunistic setup.

If you visited securetradex.com—or entered any information—assume your credentials may be compromised. Discontinue use of the same passwords across accounts, enable multi-factor authentication on all financial services, and scan local devices for malware. Report the domain to your IT team or security provider using the seed identifier 09ca53 for correlation. Consider changing passwords from a clean, isolated device and monitor accounts for unauthorized access. Even though detections are low, the site’s behavior aligns with credential harvesting campaigns, making proactive response essential.