tradehives[.]org

The domain tradehives.org was registered on December 7, 2024 through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to the IPv4 address 142.132.252.48, which is allocated to AS24940 Hetzner Online GmbH in Germany. Authoritative name servers for the zone are dns1.harmonweb.net and dns2.harmonweb.net. No TLS certificate is presented, indicating that HTTPS was not configured for the host. The only observed HTTP response supplied a page title of “Tradehives - Home”, but the site has been taken offline as of the report date, July 22, 2026.

Gridinsoft assigned a trust score of 0 out of 100, reflecting an extreme malicious confidence rating. The domain appears on a single public security blocklist and has been explicitly listed by PhishDestroy as a brand‑impersonation site. VirusTotal analysis recorded a single detection among ninety‑five scanning engines, confirming that at least one vendor flagged the domain as malicious. The threat is classified as brand impersonation targeting the Signal brand, as indicated by the intelligence, though the exact content used to mimic the brand has not been captured.

Uncertainties remain around the site’s full payload, HTTP status codes, and any additional infrastructure components beyond the listed nameservers and hosting provider. Defensive recommendations include adding tradehives.org and its associated IP address to local blocklists, monitoring DNS queries for the domain, and surveilling other domains that share the same nameserver pair or Hetzner hosting footprint. Because the site is currently offline, any future re‑activation should be treated as high‑risk, and alerts should be generated on any renewed activity.