cldtrade[.]com

Analysis indicates that cldtrade.com was registered on 21 February 2026 and is currently offline. The site presented itself as a cryptocurrency exchange, as shown by the page title “Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | cldtrade”. The domain is explicitly linked to a brand‑impersonation campaign targeting Avalanche, and the overall scam classification is a crypto‑scam. Infrastructure analysis shows the domain resolves to 104.21.69.49, an address owned by Cloudflare, Inc. (AS13335) located in the United States.

The SSL certificate presented for the host is identified only as “WE1”, without further validation details. Reputation services place the domain on a single security blocklist and record a Gridinsoft trust score of 0 / 100 and a Scamadviser score of 47 / 100, indicating very low confidence in legitimacy. PhishDestroy has also blocked the domain. VirusTotal reports 12 of 93 anti‑malware engines flagging the domain, reinforcing the malicious assessment.

The combination of brand impersonation, low trust scores, blocklist presence, and multiple vendor detections suggests a high likelihood that the site was used to lure victims into cryptocurrency transactions under the guise of Avalanche services. Uncertainty remains regarding the exact malicious payload or credential‑stealing mechanisms, as no page content beyond the title has been examined. Defenders should continue to deny any network connections to 104.21.69.49, add cldtrade.com to URL filtering and intrusion‑prevention policies, and monitor for other domains that resolve to the same Cloudflare IP range and exhibit similar brand‑impersonation patterns. Ongoing threat‑intel feeds should be consulted for any resurgence of the domain or related indicators.