web[.]decimaltrades[.]com

web.decimaltrades.com was registered on 2026-03-06 through Gname.com Pte. Ltd. The domain resolves to IP 104.21.81.43, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is handled by the Cloudflare nameservers david.ns.cloudflare.com and samara.ns.cloudflare.com. The site presented the page title “Focused on providing decentralized financial solutions,” but the HTTP service has been taken offline at the time of analysis, and no live content could be retrieved. Security telemetry indicates that the domain is listed on the PhishDestroy blocklist, confirming a phishing classification. Additionally, it appears on a separate security blocklist, and three of ninety‑four VirusTotal scanners flagged the domain as malicious.

The SSL certificate is issued by Google Trust Services under the WE1 label, which is a legitimate certificate authority but does not mitigate the malicious intent inferred from the blocklist entries. The combination of recent registration, use of a reputable CDN, and rapid appearance on phishing blocklists is consistent with a typical infrastructure pattern employed for short‑lived phishing campaigns targeting users interested in decentralized finance. The limited detection footprint—three vendor detections and a single blocklist entry—suggests that the campaign may have been in an early stage or that it was swiftly taken down. Because the site is currently offline, content analysis is not possible, leaving the exact phishing payload and target brand unspecified.

Defenders should continue to block the domain at network perimeter devices and update URL filtering feeds with the observed indicators. Monitoring of the associated IP address and Cloudflare nameservers for future registrations can help identify repeat use of the same infrastructure.