convexfinace[.]com

The domain convexfinace.com was observed resolving to the IPv6 address 2606:4700:3030::6815:6001, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative name servers are brett.ns.cloudflare.com and val.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare's DNS and edge infrastructure. The site presented a page title of “Google”, and the threat profile lists Google as the targeted brand, indicating a brand‑impersonation attempt. No TLS certificate was detected for the domain, meaning HTTPS connections would be unavailable or untrusted.

VirusTotal reports nine of ninety‑five scanned security vendors flagging the domain, providing independent confirmation of malicious intent. The domain appears on two public blocklists, PhishDestroy and ScamSniffer, further corroborating its classification as a phishing‑type resource. Registration metadata show the domain was created on 07 August 2025 and was registered through NiceNIC International Group Co., Limited. Current monitoring indicates the domain is taken offline, but the historical evidence suggests it was previously used for brand‑impersonation activity.

Defenders should continue to block the IPv6 address and the domain at perimeter filters, add the domain to internal blacklist feeds, and monitor for any re‑registration or resurrection of the same host name. Because the site lacks a valid SSL certificate and serves only a generic page title, automated content analysis could not retrieve additional payload indicators. Ongoing vigilance is recommended, especially for any future DNS resolution to Cloudflare infrastructure that matches the observed name‑server pattern.