traderefund[.]com

PhishDestroy identifies the domain traderefund.com as a generic phishing campaign currently under active investigation as of November 2025. The domain is designed to deceive users seeking trade refunds, with the specific threat type being generic phishing. As of this report, the campaign remains active and unmitigated. This domain was flagged by 1 of 95 VirusTotal vendors at the time of analysis, indicating it has not yet been widely recognized as malicious. It is registered through NAMECHEAP INC, resolves to the IP address 188.114.97.3, and was created on November 16, 2025. The domain holds a valid SSL certificate issued by Google Trust Services, which may contribute to its perceived legitimacy. Trust scores from other security vendors are pending due to its recent creation and low detection rate. Given the active status and low detection rate, users should avoid interacting with traderefund.com or any associated links. Organizations and individuals are advised to block the domain at the network level and monitor for related IP addresses or domains. Reporting this domain to threat intelligence platforms and security vendors is strongly recommended to expedite its identification and mitigation. Exercise heightened caution with any unexpected trade refund notifications or requests for sensitive information.