volutronsicherheit[.]com

The domain volutronsicherheit.com was registered on February 21, 2026 through Metaregistrar BV and is currently taken offline. DNS resolution points to the Cloudflare edge address 172.67.132.13, which belongs to AS13335 (Cloudflare, Inc.) and resolves to a United States location. The authoritative nameservers are achiel.ns.cloudflare.com and karina.ns.cloudflare.com, both Cloudflare‑managed. No TLS certificate is presented for the site, indicating that HTTPS is not configured. The page title observed when the site was reachable reads "Volutron Sicherheit™: Offizielles KI‑Trading in Deutschland | Geprüft & Vertrauenswürdig," suggesting a claim of official AI‑driven trading services targeting German users. The domain explicitly impersonates the cryptocurrency exchange Binance, as indicated by the threat type “brand impersonation” and the classified scam type “Crypto Scam.”

Detection data shows that the domain appears on one security blocklist and is flagged by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reflecting a highly malicious assessment. VirusTotal analysis returned four positive detections out of ninety‑three scanning engines, confirming that multiple security vendors have identified malicious behavior. The limited number of detections may result from the domain’s brief lifespan before being taken offline.

Observations confirm that the infrastructure relies entirely on Cloudflare, a common choice for fast‑hosting malicious pages while obscuring the underlying origin server. The lack of SSL, the use of generic Cloudflare nameservers, and the rapid takedown suggest a short‑lived phishing campaign aimed at harvesting credentials or funds from Binance users. No additional content, login forms, or payload details have been captured, leaving the exact delivery mechanism uncertain.