kazitradebd[.]com

The domain kazitradebd.com is identified as a brand‑impersonation campaign that purports to target the WhatsApp brand. Registration occurred on 11 March 2023 via NameCheap, Inc., and the domain remains active as of 23 July 2026. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. Both authoritative nameservers—buck.ns.cloudflare.com and carol.ns.cloudflare.com—are Cloudflare‑managed, indicating the site is fronted by a commercial content‑delivery network. The site presents an HTTPS service with a certificate issued by Google Trust Services under the WE1 root, and HSTS is enforced, confirming a valid TLS configuration.

An HTTP request returns a 200 status code, and the page title retrieved is “KaziTradebd.com – Kazi Trade & Communication | CCTV Service in Bangladesh,” which does not directly reference WhatsApp or any credential‑collection interface. Infrastructure analysis shows the site runs WordPress coupled with MySQL, PHP, and front‑end libraries such as Swiper, NitroPack, jQuery, and jQuery Migrate. VirusTotal scans have flagged the domain by 12 of 95 security vendors, suggesting moderate detection across AV engines. AlienVault OTX records associate the domain with seven distinct threat‑intel pulses, reinforcing its malicious reputation. The domain appears on two public blocklists and is explicitly blocked by PhishDestroy and CryptoFirewall.

A Gridinsoft trust score of 0 out of 100 further reflects a low credibility rating. While the visible page content appears benign, the combination of brand‑impersonation labeling, multiple vendor detections, and inclusion in threat‑intel feeds indicates a high‑risk profile. Defenders should block the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and incorporate the domain into phishing‑specific threat‑intel feeds.