paxil-vision[.]com

The domain paxil-vision.com was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are leah.ns.cloudflare.com and mario.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. Registration was performed through the registrar Gransy, s.r.o., a provider frequently observed in malicious campaigns. No TLS certificate is presented on the site, leaving the HTTP connection unencrypted and exposing any traffic to interception.

The page title retrieved before takedown reads "Paxil Vision™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig," suggesting a fraudulent claim of a German‑based AI trading service. The domain is classified as a brand‑impersonation campaign targeting the brand argent. Detection metrics show that eight of ninety‑three antivirus and URL scanning engines on VirusTotal flagged the domain as malicious, and it appears on a single public blocklist, currently enforced by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, and AlienVault OTX lists the domain in one threat‑intel pulse.

The combination of a recent registration, Cloudflare hosting, lack of SSL, low trust score, and multiple vendor detections indicates a high likelihood that the domain was used to harvest credentials or solicit funds under the guise of a legitimate financial service. Defenders should ensure that network egress filters block outbound connections to 188.114.97.3 and that any internal DNS resolvers are configured to reject resolutions for paxil-vision.com. Endpoint protection should be updated to incorporate the eight VirusTotal detections, and security teams should monitor for any residual indicators of compromise associated with the argent brand impersonation pattern.