bonus-paradex[.]trade

This domain, bonus-paradex.trade, was registered on 5 March 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (AS13335) with the IP address 188.114.97.3 located in the United States. The site currently returns the generic page title “Just a moment…”, indicating that the Cloudflare front‑end is presenting its default challenge page rather than a custom landing page. No TLS certificate is installed, meaning the site is served over plain HTTP or unencrypted HTTPS, which further undermines trust. The domain is classified as a fake‑airdrop phishing operation; the scam type appears in the intelligence feed and aligns with the “generic phishing” threat label.

Gridinsoft assigns a trust score of 0 / 100, and three security vendors on VirusTotal have flagged the domain out of a total of ninety‑four scans, suggesting malicious behavior. The domain is listed on three public blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple anti‑phishing and crypto‑wallet protection services have recognized it as hostile. Despite these indicators, the site has been taken offline, and no SSL certificate, HTTP status code, or detailed page content is available for further analysis.

Defenders should continue to block the domain at perimeter firewalls, DNS filters, and endpoint security products, and update any existing threat‑intel feeds with the registration and hosting details. Monitoring for re‑use of the same IP address or similar Cloudflare‑proxied domains is advisable, as threat actors frequently recycle infrastructure. Until the site reappears, investigators should treat any future resolution of bonus‑paradex.trade as potentially malicious and apply the same mitigation controls.