algo-aloxifinsoftware[.]com

Analysis as of July 24 2026 indicates that the domain algo-aloxifinsoftware.com was registered on December 4 2025 through MainReg Inc. The authoritative nameservers are eve.ns.cloudflare.com and quentin.ns.cloudflare.com, and the host resolves to IP 185.62.57.137, which belongs to AS62370 Snel.com B.V. in the Netherlands. The web server presents an Nginx front end, loads Google Hosted Libraries and Google Font API resources, and is delivered behind Cloudflare with HTTP/3 support. The site delivers a TLS certificate from Let’s Encrypt (E7 series) and returns HTTP 200 for the root URL. The page title observed is “Algo Aloxi Fin ™ - The Official App WebSite 2025 [UPDATED]”, and the domain is classified as a brand‑impersonation scam targeting the “base” brand.

The MX record points to mail.algo-aloxifinsoftware.com with priority 10, indicating a functional mail service. Reputation checks show a Scamadviser trust score of 1/100 and a Gridinsoft score of 0/100, reflecting extremely low credibility. The domain is listed on at least one security blocklist and has been blocked by PhishDestroy. AlienVault OTX contains a single pulse referencing this indicator, and VirusTotal analysis shows 21 of 95 scanners flagging the host as malicious.

These multiple independent detections suggest an active malicious infrastructure. Uncertainties remain regarding the specific payload or credential‑harvesting mechanisms employed, as no visual or content analysis of the landing page is available. Defenders should add the domain and its IP address to deny‑list or firewall rules, monitor DNS queries for the associated MX host, and ensure that any inbound traffic to the Cloudflare‑protected IP is inspected for anomalous activity. Continuous re‑evaluation of threat‑intel feeds, including OTX and PhishDestroy updates, is recommended to capture any changes in the domain’s behavior or additional takedown actions.