vtradexglobal[.]com

Analysis of vtradexglobal.com as of July 25 2026 indicates that the domain was created on March 23 2026 and is registered through Spaceship, Inc. The authoritative nameservers are angelina.ns.cloudflare.com and glen.ns.cloudflare.com, pointing the domain to the Cloudflare network. DNS resolution returns the address 188.114.96.3, which is geolocated to Canada and associated with Cloudflare, Inc. The web server responds with HTTP 200 and presents a TLS certificate issued by Let’s Encrypt (certificate identifier E7). The certificate is valid for the domain and does not reveal any mismatched hostnames. Reputation checks show a Gridinsoft trust score of 0 out of 100, indicating a lack of trust. The domain is listed on three public security blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering services.

VirusTotal analysis reports that one of ninety‑four scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The three blocklists that list the domain are not enumerated in the source, but their presence indicates that multiple independent security vendors have identified the host as malicious. Only a single vendor flagged the domain on VirusTotal, which may reflect either a narrow detection capability or a recent addition to the scanning database. The intelligence categorizes the campaign as a “Fake Exchange” scam, which aligns with the elevated risk rating assigned to the domain. The current operational status is recorded as offline, suggesting that the malicious infrastructure may have been taken down or is temporarily inaccessible.

Uncertainties remain regarding the specific payload or credential‑harvesting mechanisms employed, as no page title, brand references, or detailed content analysis have been provided. Additionally, the limited number of detections on VirusTotal prevents a full assessment of the threat’s prevalence across the broader security ecosystem.