stucktradhub[.]xyz

This domain, stucktradhub.xyz, has been identified as an investment-themed phishing site targeting users with fraudulent financial schemes. The page title, "StuckTradhub – Safe investment with StuckTradhub," suggests an attempt to impersonate legitimate investment platforms, though no specific brand is directly mimicked. The domain is currently offline, but prior activity indicates a deliberate effort to deceive users into disclosing sensitive financial or personal information. Analysis reveals multiple high-risk indicators associated with stucktradhub.xyz. The domain was registered on April 26, 2026, through Cosmotown Inc., and resolves to the IP address 37.49.229.75. It has been flagged by 9 of 95 security vendors on VirusTotal, appearing on 3 distinct security blocklists. Trust scores from Gridinsoft and Scamadviser both rate the domain at 1 out of 100, reinforcing its malicious classification. Detected technologies include LiteSpeed, jQuery, and HTTP/3, which are commonly used in both legitimate and malicious web infrastructure. The domain has been actively blocked by multiple security mechanisms, including browser-based protections and real-time threat intelligence feeds. The current offline status of stucktradhub.xyz does not eliminate the risk of future malicious activity, as threat actors frequently reuse infrastructure or register similar domains. Organizations and users are advised to block the domain and its associated IP (37.49.229.75) at the network level. Security teams should monitor for related domains registered through the same registrar (Cosmotown Inc.) or resolving to the same IP range. Users who may have interacted with the site should be instructed to reset credentials, enable multi-factor authentication, and review financial accounts for unauthorized activity. Proactive threat hunting for indicators of compromise (IOCs) such as the domain, IP, and page title is recommended to detect potential breaches.