cortextrade[.]ai

Analysis of cortextrade.ai indicates a high‑risk phishing infrastructure. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and resolves to 188.114.97.3, an address owned by Cloudflare, Inc. (AS13335) in the United States. DNS resolution uses the Cloudflare authoritative nameservers vin.ns.cloudflare.com and alexia.ns.cloudflare.com, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 label. HTTP requests return a 301 redirect, and the observable page title is “Cortex Trade | Automated Cryptocurrency Trading Powered by AI,” suggesting a fraudulent cryptocurrency‑trading lure.

Malware and abuse scanners have flagged the domain: one of ninety‑three VirusTotal vendors reported it as malicious, and it appears on the PhishDestroy blocklist. Independent reputation services assign a trust score of 1 / 100 on both Scamadviser and Gridinsoft. Detected front‑end technologies include Proton Mail, Unpkg, jsDelivr, Google Analytics, Cloudflare Browser Insights, Cloudflare, and HTTP/3, all of which are commonly found on benign sites and do not mitigate the observed malicious intent.

Given the confirmed phishing classification, the limited detection count, and the extremely low reputation scores, defenders should treat cortextrade.ai as hostile. Recommended actions are to add the domain to network and endpoint blocklists, monitor DNS queries for the associated IP and nameservers, and enforce TLS inspection to capture any redirected payloads. Because the site’s content beyond the title has not been publicly captured, further investigation of the landing page and any credential‑capture mechanisms is advised to refine detection signatures.