traderid[.]info

This domain, traderid.info, was registered on February 21, 2026 through NameSilo, LLC and is presently classified as a high‑risk generic phishing site. The authoritative nameservers are ns1.dnsowl.com and ns2.dnsowl.com, indicating use of a third‑party DNS provider. The site returns HTTP 200 and presents the page title “traderid.info – traderid Resources and Information”, suggesting a façade that mimics legitimate financial resources. Network analysis shows the domain resolves to the IPv4 address 216.198.79.65, which belongs to the United States and is announced by AS16509, Amazon.com, Inc. The hosting stack consists of Google Cloud fronted by Nginx and Google Cloud CDN, and the TLS certificate is issued by Let’s Encrypt (identifier YE1). These components are typical of rapidly deployed phishing infrastructure. Threat intel indicates the domain appears on one security blocklist and is actively blocked by PhishDestroy. The Gridinsoft trust score is 0 out of 100, reflecting a maximum confidence of malicious intent. VirusTotal reports a single positive detection out of 95 scanners, confirming that at least one vendor has identified malicious behavior. The site remains active as of the report date. Defenders should add traderid.info and its resolving IP 216.198.79.65 to deny lists at perimeter and endpoint controls. Continuous DNS monitoring is advised to detect any future aliasing or fast‑flux tactics. Because the underlying cloud infrastructure can be re‑hosted quickly, organizations should also monitor traffic to Google Cloud services for anomalous patterns that match the observed user‑agent and TLS fingerprint. Incident response teams should treat any credential submissions to this domain as compromised and enforce password resets for affected accounts.