mxjtrade[.]com

This domain, www.mxjtrade.com, is actively flagged as a high-risk phishing threat. Registered on February 21, 2026, through Gname.com Pte. Ltd., the domain remains operational despite its malicious classification. Infrastructure analysis reveals it resolves to a Cloudflare IPv6 address (2606:4700:3037::ac43:b72b) within AS13335, a network frequently leveraged for both legitimate and malicious traffic. The domain is currently listed on one security blocklist and is blocked by at least one vendor, indicating confirmed abuse. Technical indicators show the domain employs Cloudflare nameservers (diana.ns.cloudflare.com and malcolm.ns.cloudflare.com) and utilizes Cloudflare Browser Insights alongside HTTP/3. The SSL certificate is issued by Google Trust Services, a common provider for both benign and malicious sites. Access attempts return an HTTP 403 status, suggesting either server-side restrictions or automated filtering to evade detection. The page title 'Just a moment...' is consistent with Cloudflare's default challenge page, which may be used to obscure malicious content or delay analysis. VirusTotal reports one security vendor flagging the domain, though the limited detection count does not diminish its confirmed status as an active threat. The registration age of approximately five months does not align with typical short-lived phishing domains, raising questions about its persistence or potential reuse. Defenders should treat this domain as hostile and implement blocking measures at the DNS or network layer. Monitoring for related subdomains or IP associations within the same Cloudflare ASN may reveal additional malicious infrastructure.