wallora-fenzitex[.]com

Analysis of the domain wallora-fenzitex.com indicates a confirmed crypto scam impersonating Binance, operational as of July 23, 2026. The domain was registered on January 8, 2026, through Realtime Register B.V. and currently resolves to the IP address 172.67.174.43, hosted on Cloudflare's infrastructure (AS13335) in the United States. The page title, 'Wallora Fenzitex™ - KI-Trading Deutschland 2026,' suggests a localized German-language campaign targeting cryptocurrency users, though the exact content and functionality of the site remain unanalyzed beyond this metadata. Detection metrics reveal elevated risk: 13 of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist, specifically PhishDestroy.

Trust assessment platforms further corroborate the threat, with Scamadviser assigning a trust score of 1/100 and Gridinsoft assigning 0/100. The domain's SSL certificate is issued by WE1, a provider commonly observed in low-reputation or ephemeral phishing infrastructure. Infrastructure analysis reveals the use of Cloudflare, a content delivery network frequently leveraged to obfuscate hosting origins and mitigate takedown efforts. The domain's rapid detection by multiple security vendors and its presence on a specialized phishing blocklist indicate a deliberate attempt to deceive users by mimicking Binance, a major cryptocurrency exchange.

While the domain is currently offline, defenders should treat any historical or future resolution of this domain as malicious. Network security teams are advised to block the domain and its associated IP (172.67.174.43) at the perimeter, and to monitor for related domains registered through Realtime Register B.V. or resolving to Cloudflare-hosted IPs.