flujocapital-ai[.]com

The domain flujocapital-ai.com was registered on May 18, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 188.114.97.3, which is owned by CloudFlare, Inc. and geolocated to Canada. The authoritative nameservers are marjory.ns.cloudflare.com and vick.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. The site currently returns HTTP 200, confirming that a web service is actively hosted.

Infrastructure analysis shows the site is protected by a Let's Encrypt certificate (issuer E8), which provides valid TLS encryption but does not conceal the underlying hosting provider. The Gridinsoft trust score is 0 out of 100, reflecting a lack of reputation. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy, reinforcing the suspicion of malicious intent.

Threat intelligence sources further corroborate the risk. VirusTotal reports that 1 of 95 security vendors flagged the domain, and AlienVault OTX includes the domain in one threat pulse. The page title, “Flujo Capital | Official Platform for AI Assisted Trading,” suggests an attempt to lure victims interested in AI‑driven financial services, a common vector for credential harvesting. The combination of a recent registration, low trust score, and presence on phishing‑focused blocklists justifies the high‑risk classification.

Defenders should add flujocapital-ai.com to outbound and inbound filtering rules, enforce DNS sinkholing, and monitor for any authentication attempts targeting the alleged AI trading platform. Continuous re‑evaluation is advised, as additional detections could raise the detection count on aggregators such as VirusTotal. Organizations handling financial credentials should treat any communication with this domain as malicious and block it at the perimeter.