geldmaxperigeeai[.]de

This domain, geldmaxperigeeai.de, is identified as a high-risk phishing operation targeting users through fraudulent AI-trading schemes. Analysis indicates the site impersonates legitimate automated trading platforms, specifically using branding elements associated with artificial intelligence and financial investment services in Germany. The page title, 'Geldmax Perigee AI™ - KI-Trading Deutschland 2026,' suggests a localized approach to deceive victims into believing the service is region-specific and technologically advanced. Infrastructure analysis reveals the domain was registered on February 24, 2026, and currently resolves to IP address 172.67.157.141, hosted behind Cloudflare. It is flagged by 16 of 95 security vendors on VirusTotal and appears on three distinct security blocklists. Additional technical indicators include the presence of HSTS and HTTP/3 protocols, which may be leveraged to create a false sense of legitimacy. The domain holds a Gridinsoft trust score of 0/100, further confirming its malicious classification. Detection systems such as Google Safe Browsing have categorized the threat under 'SOCIAL_ENGINEERING,' indicating manipulative tactics designed to exploit user trust. The domain is currently offline, though historical activity and infrastructure remain a concern. Organizations and individuals are advised to block the domain and associated IP at the network level. Users who may have interacted with the site should immediately revoke any shared credentials, monitor financial accounts for unauthorized activity, and report the incident to relevant cybersecurity authorities. Proactive measures include verifying the legitimacy of trading platforms through official channels and employing browser-based security tools to detect similar phishing attempts.