trade[.]club-luxanpros[.]com

The domain trade.club-luxanpros.com was registered on September 22, 2024 through Hostinger operations, UAB, and resolves to the IP address 104.21.64.1, which belongs to AS13335 Cloudflare, Inc. The site returns HTTP 200 and advertises a TLS certificate issued by Google Trust Services under the WE1 identifier. The page title reported by scanners is “Sign In | club-luxanpros”, and the domain is currently listed as active. Threat intelligence classifies the site as a credential phishing operation that impersonates the brand “scroll”. The page title and the brand target indicate an attempt to lure victims into providing login credentials. Four of ninety‑five VirusTotal scanners flagged the domain, and Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one public blocklist and has been explicitly blocked by PhishDestroy. Infrastructure analysis shows the use of Cloudflare Browser Insights, Cloudflare services, and HTTP/3, which are commonly leveraged to hide malicious back‑ends. While the listed indicators strongly suggest a malicious impersonation campaign, the content of the landing page has not been directly examined, leaving the exact credential‑capture mechanism and any additional payload undisclosed. No visual or functional description of the site is available beyond the page title, and the presence of the Google‑issued certificate does not mitigate the risk, as it is freely obtainable by the attacker. Defenders should treat trade.club-luxanpros.com as a high‑risk indicator. Immediate actions include adding the domain and its resolving IP address to web‑filter deny lists, updating intrusion detection signatures to flag HTTP requests containing the “Sign In | club‑luxanpros” title, and monitoring for similar sub‑domains that resolve to the same Cloudflare edge. Continuous re‑scanning is advised to capture any changes in the site’s content or additional detections.