tradecenter[.]space

The domain tradecenter.space was registered on 14 November 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare address 188.114.97.3, which is announced as part of AS13335 Cloudflare, Inc. located in the United States. Authoritative name servers for the zone are aida.ns.cloudflare.com and sonny.ns.cloudflare.com, confirming that the infrastructure is fully hosted behind Cloudflare’s edge network. No TLS certificate is presented for the domain, indicating that HTTPS is either not configured or deliberately omitted, which is a common characteristic of many quick‑turn phishing deployments. VirusTotal scans have flagged the domain on 16 of 95 security engines, and the site is listed on the PhishDestroy and ScamSniffer blocklists, reinforcing the suspicion of malicious intent.

Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating, and the page title returned when the site was reachable was "OTC Markets", while the threat taxonomy explicitly labels the campaign as brand impersonation targeting Coinbase. The combination of a financial‑oriented page title and a Coinbase impersonation tag suggests the operator aimed to lure cryptocurrency users to a counterfeit OTC‑market interface, potentially to harvest credentials or redirect traffic to a secondary payload. Current status is offline, so no live content can be inspected and the exact phishing kit or credential‑capture method remains unknown.

Defenders should block DNS resolution for tradecenter.space, add the associated IP 188.114.97.3 to network deny lists, and monitor for any resurgence on the same Cloudflare edge nodes. Continuous reference to the PhishDestroy and ScamSniffer feeds will capture any re‑registration attempts, and security teams should correlate the registrar and creation timestamp with other domains created in the same window to identify additional threats. Users should be reminded that any request for Coinbase login information from a URL containing tradecenter.