Analysis of icatrade.com indicates active phishing infrastructure as of July 28, 2026. The domain was registered on March 26, 2008, through Gname.com Pte. Ltd., and currently resolves to the IP address 104.21.26.60, hosted on Cloudflare nameservers armfazh.ns.cloudflare.com and rayne.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services, a common feature in both legitimate and malicious sites leveraging Cloudflare services. Infrastructure review reveals the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which classify it as high-risk phishing.
AlienVault OTX includes it in one threat intelligence pulse, suggesting prior detection in malicious campaigns. Despite these indicators, VirusTotal scans by 91 vendors show no current detections, though this absence does not confirm safety or legitimacy. The exact content or targeted brand of the phishing site remains unconfirmed, as no specific page title, brand, or scam type is documented in available intelligence.
Defenders should treat icatrade.com as an active threat, particularly in environments where financial, cryptocurrency, or credential-harvesting risks are present. Network-level blocking is recommended based on existing blocklist entries and threat intelligence associations. Further monitoring is advised to assess any shifts in detection status or infrastructure changes.