summitluxeron-es[.]com

Analysis of summitluxeron-es.com indicates a confirmed brand impersonation scheme targeting the base brand, classified as elevated risk. The domain, registered on February 21, 2026, through Metaregistrar BV, was operational until recently taken offline. Infrastructure analysis reveals it resolved to IP 104.21.15.105, hosted on Cloudflare's network (AS13335), a common pattern observed in phishing campaigns leveraging CDN services to obscure origin servers. Nameservers randy.ns.cloudflare.com and stella.ns.cloudflare.com further confirm Cloudflare's infrastructure usage. The page title, 'Summit Luxeron - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas,' suggests an attempt to impersonate an official trading platform, though the exact content and functionality of the site remain unanalyzed beyond this metadata.

Detection data is limited but indicative of malicious intent. The domain appears on one security blocklist (PhishDestroy), and one of 95 security vendors on VirusTotal flagged it prior to takedown. Gridinsoft assigned a trust score of 0/100, reinforcing the high-risk classification. Notably, the domain lacked an SSL certificate, a red flag for fraudulent sites where encryption is typically expected.

While the domain is currently offline, defenders should treat any prior resolution to 104.21.15.105 as a potential threat indicator. The absence of additional blocklist entries or broader vendor detections does not diminish the risk; brand impersonation domains often evade detection until reported or taken down. Organizations should monitor for residual DNS records, subdomains, or similar infrastructure patterns and update blocklists to prevent future access attempts. The short active period (approximately five months) aligns with typical phishing domain lifecycles, where rapid takedowns are common after detection.