alliedtrade[.]online

Analysis of the domain alliedtrade.online indicates it is an active phishing threat as of July 27, 2026. The domain was registered on February 6, 2023, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with abusive registrations. It currently resolves to the IP address 86.107.77.238 and uses nameservers ns1.netlightsystems.com and ns2.netlightsystems.com, infrastructure that has been linked to previous phishing campaigns. Detection data from security vendors is limited but notable: one of 91 vendors on VirusTotal flags the domain as malicious, and it appears on at least one security blocklist, specifically PhishDestroy.

The domain remains active, with no evidence of takedown or suspension. The exact nature of the phishing content hosted on alliedtrade.online is not yet confirmed, as the page title and targeted brand have not been analyzed. However, the domain name suggests a focus on business or trade-related credentials, which aligns with common phishing tactics. Defenders should treat this domain as high-risk and consider blocking it at the network level.

Organizations using threat intelligence feeds may already have protections in place, given its presence on PhishDestroy’s blocklist. Further investigation into the hosting IP and nameserver history could reveal additional related domains, though such analysis is beyond the scope of this report. No SSL certificate details or HTTP response anomalies were provided, so transport-layer security cannot be assessed. Given the domain’s age and persistent activity, it is likely part of a broader, ongoing campaign rather than an isolated incident.