hynea[.]trade

This domain is flagged as a high-risk generic phishing site and remains active as of July 12, 2026. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain resolves to IP address 172.67.149.222 and uses Cloudflare services including Browser Insights and HTTP/3, with an SSL certificate issued by Google Trust Services. The page displays the title 'Just a moment...', which is a Cloudflare challenge page, indicating the site may be using Cloudflare to obscure its true content from automated scanning. It appears on 4 security blocklists and has been blocked by multiple security services including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Gridinsoft assigns a trust score of 0 out of 100. VirusTotal analysis shows 5 out of 95 security vendors flagging the domain as malicious. AlienVault OTX records the domain across 23 threat intelligence pulses, suggesting it is widely tracked as part of phishing campaigns. The exact nature of the phishing content remains unconfirmed from available data, but the combination of recent registration, low trust score, multiple blocklist inclusions, and Cloudflare obfuscation is consistent with a phishing infrastructure designed to evade detection. Defenders should treat all traffic to or from hynea.trade as potentially malicious, block the domain and associated IP address at network and email gateways, and monitor for related domains registered through the same registrar or sharing the same IP range.