tradela[.]ink

On July 25 2026, tradela.ink was observed as an offline domain that had been provisioned on 21 February 2026. The domain is hosted on Cloudflare’s network (AS13335) and resolves to 104.21.95.134, an IP address located in the United States. No TLS certificate was presented, indicating that HTTPS was not configured at the time of capture. The authoritative name servers are cruz.ns.cloudflare.com and vasilii.ns.cloudflare.com, both belonging to Cloudflare’s DNS service. Automated scans identified the use of YouTube embeds, the Vue.js JavaScript framework, a Facebook Pixel tracker, and HTTP/3 support, suggesting a modern web stack but providing no direct evidence of malicious payloads.

Reputation services have consistently flagged the domain. Gridinsoft assigned a trust score of 0 out of 100. Four public blocklists—PhishDestroy, MetaMask, ScamSniffer, and SEAL—have listed tradela.ink, confirming its classification as a phishing‑related resource. VirusTotal reported nine detections out of ninety‑three scanned engines, reinforcing the malicious assessment. AlienVault’s Open Threat Exchange recorded the domain in a single pulse, further corroborating its abuse profile.

The aggregate evidence points to a generic phishing infrastructure that was taken offline shortly after deployment. Because the site is no longer reachable, active mitigation such as sink‑holing is not applicable, but defenders should continue to block any resolution to the associated IP address and enforce DNS‑level denial for the domain. Security appliances that rely on reputation feeds should retain the existing blocklist entries, and incident response teams should monitor for re‑use of the same IP or similar Cloudflare‑hosted patterns in future campaigns.