www-axiom-trades[.]xyz

Analysis of www-axiom-trades.xyz indicates that the domain was registered on 2026-03-02 through NiceNIC International Group Co., Limited and is hosted behind Cloudflare’s network (AS13335). The authoritative nameservers listed are faye.ns.cloudflare.com and trevor.ns.cloudflare.com, and the domain resolves to IP 104.21.6.90, which maps to a United States location. No TLS certificate is present, suggesting the site was served without HTTPS. The page title returned by the HTTP endpoint is “Suspected phishing site | Cloudflare”, which is a generic warning generated by Cloudflare rather than a site‑specific title.

The domain is currently offline, and its status is recorded as taken offline. Reputation checks show a Gridinsoft trust score of 0 out of 100, indicating a complete lack of trust. VirusTotal reports that four of ninety‑three scanning engines flagged the domain, though the specific signatures are not disclosed in the available data. The domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple security services have identified it as malicious.

Because the site is already taken offline, immediate mitigation actions are limited to ensuring that any cached or residual references are removed from internal allowlists and that network‑level controls continue to block the IP address 104.21.6.90 and the domain name. Defenders should update URL filtering policies to include www-axiom-trades.xyz, monitor for any resurgence of the domain or similar Cloudflare‑hosted IP ranges, and consider adding the associated nameservers to blocklists if they are reused by other malicious actors. Continuous monitoring of VirusTotal and other threat‑intel feeds is recommended to capture any new detections that may arise if the operator reactivates the domain.