tradesphereflux[.]com[.]lennoxglobaledge[.]com

The domain tradesphereflux.com.lennoxglobaledge.com was registered through NameSilo, LLC on January 14, 2026 and is currently active. It resolves to the IPv4 address 204.13.237.20 and is served by the authoritative nameservers ns23.sailexhosting.com and ns24.sailexhosting.com. VirusTotal analysis shows that two out of ninety‑one scanning engines have flagged the domain, indicating limited but non‑trivial detection by automated malware scanners.

Independent security intelligence lists the domain on a single blocklist and it is explicitly blocked by the PhishDestroy service, confirming that threat‑sharing communities consider it malicious. The threat classification is recorded as generic phishing, and the risk rating is high. No additional public indicators such as SSL certificate details, HTTP response codes, or page titles are available in the current dataset.

The limited vendor detections combined with blocklist inclusion suggest that the domain is being used for phishing campaigns that have not yet triggered widespread detection across all scanning services. Defenders should consider adding the domain and its resolving IP address to network deny lists, enforce DNS‑level blocking where possible, and monitor outbound traffic for connections to 204.13.237.20. Continuous re‑evaluation is advised, as further analysis or additional detections could increase the detection count and broaden the threat landscape surrounding this infrastructure.