belotrixio-invest[.]com
“Belotrixio - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni”
belotrixio-invest.com — Contenido no disponible (HTTP 502). Suplantación de marca: Base; Tipo de estafa: Investment Scam. Resumen de las pruebas: VirusTotal 2/93 (ESET, SOCRadar); PhishDestroy score 61/100. Registrador: Gransy, s.r.o.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
On 21 February 2026 the domain belotrixio-invest.com was registered through Gransy, s.r.o. The domain resolves to 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The authoritative name servers are brodie.ns.cloudflare.com and nataly.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No TLS certificate is presented for the host, indicating that HTTPS is not configured. The site’s HTML title, captured before the takedown, reads "Belotrixio - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni", which aligns with the classified scam type of an investment scam.
The domain is flagged by two of ninety‑three VirusTotal scanners, and it appears on a single security blocklist, specifically PhishDestroy. AlienVault OTX lists the domain in one pulse, providing additional corroboration of malicious activity. Reputation services assign extremely low trust scores: Scamadviser rates the domain 1/100 and Gridinsoft 0/100. The domain is identified as impersonating the brand "base", as indicated in the provided intelligence.
Current operational status is offline, suggesting the hosting content has been removed or the site is otherwise inaccessible. Defenders should continue to monitor DNS resolutions for the IP 188.114.96.3 and the associated Cloudflare name servers, as the infrastructure could be reused for future campaigns. Blocking the domain at perimeter defenses, adding the IP to deny lists, and updating threat‑intel feeds with the observed indicators are recommended mitigation steps. Because the site is no longer reachable, direct content analysis is not possible, and further investigation would rely on archival captures or network traffic logs if available.
Señales de seguridad
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externos
PD-20260107-AE2225 Recipient: abuse@regtons.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.