elitetrinexai[.]net

The domain elitetrinexai.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to the IP address 172.67.128.160, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is served by Cloudflare nameservers melissa.ns.cloudflare.com and sterling.ns.cloudflare.com, and it does not present an SSL certificate, indicating that any HTTPS connections would rely on Cloudflare’s default TLS termination rather than a site‑specific certificate. The page title observed before takedown reads "Élite Trinex - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis," and the campaign is classified as a brand‑impersonation effort targeting the brand Argent.

Detection telemetry shows the domain appears on three security blocklists—PhishDestroy, MetaMask, and SEAL—and has a Gridinsoft trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal analysis flags the domain by 11 of 93 security vendors, reinforcing the suspicion. Although the site is presently offline, the infrastructure footprint—Cloudflare hosting, lack of a dedicated TLS certificate, and presence on multiple blocklists—suggests a typical fast‑flux or temporary phishing deployment.

Defenders should add the domain and its associated IP address to internal blocklists, monitor for any resurrection of the host under the same IP or similar Cloudflare‑managed nameservers, and watch for new registrations that reuse the “elitetrinexai” lexical pattern. Continuous watch of the three blocklists that have already listed the domain is advised, as well as correlation with any outbound traffic to the IP 172.67.128.160 that may indicate residual malicious activity.