testing2[.]securetradesolutions[.]info

The domain testing2.securetradesolutions.info is currently active and classified as a credential phishing infrastructure. DNS resolution points to the IPv4 address 104.21.55.196, which is the sole host observed for this indicator. The domain is listed on two independent security blocklists and has been explicitly blocked by the PhishDestroy and ScamSniffer filtering services. VirusTotal analysis shows that 14 out of 91 scanning engines have raised a detection, indicating a moderate level of consensus among antivirus and URL‑reputation products that the domain is malicious.

Nameserver queries return NS_NOT_FOUND, suggesting that authoritative name server information is unavailable or has been deliberately obscured, a pattern frequently observed in fast‑flux or transient phishing deployments. At present, no public information regarding the underlying web content, SSL certificate details, HTTP response codes, or targeted brand is available. Consequently, the exact phishing lure employed by the site cannot be described, and the presence of additional infrastructure such as command‑and‑control servers or credential‑harvesting endpoints remains unknown. Defenders should prioritize immediate containment by adding the domain and its resolved IP address to local deny lists, ensuring that outbound traffic to 104.21.55.196 is blocked at the network perimeter.

Continuous monitoring of DNS query logs for any re‑registration of the domain or emergence of new name servers is advised, as well as periodic re‑scanning on VirusTotal to capture any changes in detection ratios. Integration of the domain into threat‑intel feeds used by email gateways and web proxies will further reduce exposure to credential‑phishing attempts originating from this indicator. Organizations should also share indicators of compromise with industry ISACs to aid collective defense.