dynarisflex71-ai[.]com

The domain dynarisflex71-ai.com was registered on February 21, 2026 through the registrar Gransy, s.r.o. and immediately began serving content that advertises a trading‑related service, as indicated by the page title “DynarisFlex 7.1 Ai – Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas”. The title contains no direct reference to the targeted brand, but the intelligence set classifies the operation as a brand‑impersonation campaign against the financial brand argent. Infrastructure analysis shows the domain resolves to IP address 188.114.96.3, which is part of AS13335 owned by Cloudflare, Inc., and the host is located in the United States. Both authoritative nameservers, melinda.ns.cloudflare.com and seamus.ns.cloudflare.com, are Cloudflare DNS servers, suggesting the attacker leveraged Cloudflare’s free services for anonymity.

No TLS certificate was observed; the site was reachable over HTTP only before being taken offline. Reputation services assign extremely low trust scores—Scamadviser 1/100 and Gridinsoft 0/100—indicating a high likelihood of malicious intent. The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy. VirusTotal scans show two of ninety‑three antivirus engines flagging the domain, reinforcing the suspicion.

Current status is offline, but the short lifespan and rapid takedown imply a transient campaign. Defenders should continue to monitor the IP and associated Cloudflare nameservers for any re‑use, add the domain to internal blocklists, and educate users that any unsolicited communications referencing argent or the “DynarisFlex” branding are likely fraudulent. Uncertainties remain regarding the exact payload or credential‑harvesting mechanisms, as no page content was captured beyond the title. Further investigation of the two VirusTotal detections could reveal the specific malware families or indicators of compromise tied to this infrastructure.