# tradefaircoin.com — SUSPICIOUS

> Tradefaircoin.com was identified as a medium-risk phishing domain and is now offline. Stay informed and protect yourself from online scams.

## Summary
PhishDestroy identifies tradefaircoin.com as a phishing domain primarily targeting users with generic social engineering tactics. Classified as a medium-risk threat, this domain was designed to impersonate legitimate cryptocurrency or trading services, leveraging the name Tradefair Coin to lure potential victims. The domain’s relatively recent registration date—March 11, 2026—and generic branding raise suspicion of opportunistic phishing attempts aimed at exploiting user trust in financial platforms.

Technical analysis reveals that tradefaircoin.com resolved to IP address 192.142.54.88 and was registered through Upperlink Limited, a registrar sometimes associated with suspicious activities. The domain was flagged by a single security blocklist and detected by 3 out of 95 VirusTotal security vendors, signaling moderate concern. These indicators, combined with the domain’s suspicious registration pattern and limited footprint, align with typical phishing infrastructure designed for transient campaigns. The page title “Home | Tradefair Coin” further suggests an attempt to mimic a legitimate trading website interface.

Currently, the domain is offline, indicating either proactive takedown or abandonment following detection. PhishDestroy recommends continued monitoring of related domains and vigilance when engaging with unfamiliar cryptocurrency services. Users should avoid interacting with tradefaircoin.com and verify all financial platforms through trusted sources to prevent fraud and data compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Home | Tradefair Coin

## Domain Intelligence
- Registered: 2026-03-11 03:07:02
- Registrar: Upperlink Limited
- Country: US
- IP: 192.142.54.88
- IP Country: NL
- IP City: Amsterdam
- IP Org: AS214036 Ultahost, Inc.
- Nameservers: dns5.fimgohost.com dns6.fimgohost.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["CRDF", "Netcraft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cdab0-0ac5-719e-a4f2-15bb4e0bae69.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/76f71d97-6e74-4e2e-baaa-a4adab32b455
- PhishDestroy: https://phishdestroy.io/domain/tradefaircoin.com/
- LLM endpoint: https://phishdestroy.io/domain/tradefaircoin.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tradefaircoin.com/
Last updated: 2026-03-19