algo-aloxifin[.]com

Analysis indicates that the domain algo-aloxifin.com was registered on 21 February 2026 through Metaregistrar BV and subsequently pointed to Cloudflare infrastructure (AS13335) with the IP address 172.67.177.244 located in the United States. The domain resolves to Cloudflare nameservers ullis.ns.cloudflare.com and wells.ns.cloudflare.com, but no TLS certificate was observed, implying that HTTPS is not available. The site’s page title, “Algo Aloxi Fin - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas”, suggests a financial‑technology offering, yet the brand target field lists “base”, indicating that the campaign is attempting to impersonate the brand named “base”. The Gridinsoft trust score of 0/100 classifies the domain as highly untrusted.

Independent detection services have flagged the domain: one of ninety‑three VirusTotal scanners reported malicious activity, and the domain appears on a single external blocklist. PhishDestroy has also added the domain to its blocklist. The overall risk rating is elevated, and the current operational status is offline, which may be the result of takedown actions or temporary suspension. Evidence confirms the presence of brand impersonation tactics, but the specific payload, credential‑stealing mechanisms, or malicious redirects have not been captured in the available data.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and include the associated IP address and nameserver pair in threat‑intel feeds. Ongoing observation of Cloudflare‑hosted infrastructure is advised, as the attacker may shift to alternative subdomains or employ fast‑flux techniques. Organizations that rely on the legitimate “base” brand should educate users about the fraudulent page title and advise against visiting unauthenticated URLs that reference “Algo Aloxi Fin”.