trdedgepip[.]com

The domain trdedgepip.com was registered on May 05, 2025 through GMO Internet, Inc. and is currently listed as offline. DNS resolution points to IP address 213.165.249.109, which belongs to ASN22611 InMotion Hosting, Inc. located in the Netherlands. The hosting environment reports Nginx and OpenResty as the web server stack. The SSL certificate presented is a Go Daddy Secure Certificate Authority – G2 issued by GoDaddy.com, Inc., indicating a publicly signed HTTPS endpoint.

The site’s page title was observed as "Home | Tradedgepip," and the campaign is classified as a brand impersonation targeting Mastercard. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a highly malicious assessment. The domain appears on a single security blocklist and has been blocked by the PhishDestroy mitigation service. VirusTotal analysis shows that 2 of 95 scanned security vendors flagged the domain, providing additional corroboration of malicious intent.

Nameserver configuration uses ns1.srvconfigr.com and ns2.srvconfigr.com. While the exact content of the landing page has not been captured, the available indicators—low trust score, limited vendor detections, blocklist presence, and explicit brand impersonation labeling—support a high confidence rating for malicious activity. Defenders should continue to block the domain at perimeter defenses, monitor the associated IP address for any re‑use, and update threat‑intel feeds with the registration and hosting details. Ongoing observation is advised in case the site re‑appears under a different host or certificate, but current evidence justifies containment and removal from allowed traffic lists.