atlastradeltd[.]com

AtlasTradeLtd.com was registered on September 16, 2024 through Web Commerce Communications Limited dba WebNic.cc. The domain resolves to the IPv4 address 159.100.6.5 and is served by four authoritative name servers (ns1‑ns4.ultahost.com). Since its inception the domain has been observed on a single security blocklist and is actively blocked by the PhishDestroy service.

VirusTotal analysis shows that nine of ninety‑one scanning engines have raised a detection, indicating partial consensus among security vendors that the site is malicious. The domain is currently flagged as a generic phishing infrastructure and remains active as of the report date, July 27, 2026. The limited detection count and presence on only one blocklist suggest that the campaign may be in early distribution or employing evasive hosting techniques, but the corroborating evidence from multiple sources confirms a high‑risk posture.

Defenders should add atlastradeltd.com to outbound traffic monitoring rules, enforce DNS sink‑holing or blocklisting at the recursive resolver level, and inspect any connections to the hosting IP 159.100.6.5 for anomalous payloads. Incident response teams encountering credential harvest attempts should correlate logs with the known nameserver set and registrar information to aid attribution. Ongoing surveillance of the IP address and the associated name servers is recommended, as changes in hosting configuration could indicate a shift in campaign tactics.