labtrade[.]network

Analysis of the domain labtrade.network shows it was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP address 104.21.94.189, which belongs to the AS13335 network operated by Cloudflare, Inc. Nameservers pete.ns.cloudflare.com and ariella.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure. The site serves content over HTTPS using a Google Trust Services / WE1 certificate, indicating a valid TLS chain.

When accessed, the HTTP response returns status code 403 and presents the page title “Just a moment…”. Automated scanning on VirusTotal records 2 out of 95 security vendors flagging the domain as malicious, and the domain appears on a single external blocklist. The Gridinsoft trust score is 0 out of 100, and PhishDestroy has already added the domain to its blocklist, reinforcing the perception of malicious intent.

The combination of a recent registration, Cloudflare front‑end, a low trust score, and the presence of a 403 page titled “Just a moment…” aligns with patterns used by credential‑harvesting campaigns that rely on redirection or JavaScript challenges to evade automated analysis. The high risk rating reflects the likelihood that the site is intended to capture user credentials or personal information, although the exact phishing content has not been publicly disclosed.

Defenders should block DNS resolution for labtrade.network at the network perimeter and add the domain to web‑filter deny lists. Continuous monitoring of outbound traffic to the IP 104.21.94.189 is advised, as the address may host additional malicious payloads under the same Cloudflare tenant. Incident response teams should also review authentication logs for attempts to submit credentials to this domain and consider credential rotation if exposure is suspected.