dortalonix-invest[.]com

This domain, dortalonix-invest.com, was registered on 21 February 2026 through Name SRS AB and resolved to the IP address 104.21.2.245, which belongs to Cloudflare, Inc. (AS13335) located in the United States. The domain is currently offline, and no SSL certificate is presented for the host. DNS resolution uses the Cloudflare nameservers hassan.ns.cloudflare.com and jewel.ns.cloudflare.com. The site title retrieved from the now‑inactive page is “Dortalonix Erfahrungen | KI‑Trading | Hohes Kapital sichern”, indicating a focus on artificial‑intelligence trading and capital promises, while the threat profile lists Binance as the impersonated brand and classifies the operation as an investment scam.

Open‑source threat intelligence from AlienVault OTX registers a single pulse referencing this domain. Reputation services assign extremely low scores: Gridinsoft rates the domain 0 out of 100, and Scamadviser records a trust score of 1 out of 100. VirusTotal analysis shows five of ninety‑three scanning engines flagging the domain, reinforcing the malicious assessment. The domain appears on one security blocklist and is specifically listed by PhishDestroy as a malicious entry.

Because the site is taken offline, direct content inspection is not possible, leaving the exact phishing page layout and any credential‑capture mechanisms unverified. Nevertheless, the convergence of low trust scores, multiple vendor detections, and explicit impersonation of Binance provide sufficient evidence for defensive action. Security teams should add dortalonix‑invest.com to URL filtering and DNS blocklists, monitor the associated IP range for re‑hosting attempts, and enforce strict validation of any Binance‑related communications. Continuous observation of the Cloudflare nameservers is advised, as the infrastructure could be repurposed for future campaigns.