asilfinspirex-invest[.]com

On 24 July 2026, the domain asilfinspirex-invest.com was observed to be offline but retains multiple indicators of a brand‑impersonation investment scam targeting Binance users. The domain was registered on 21 February 2026 through Metaregistrar BV and points to the IP address 104.21.78.103, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Both authoritative nameservers, brenda.ns.cloudflare.com and kirk.ns.cloudflare.com, resolve to Cloudflare infrastructure, indicating the use of a reputable CDN to mask the original hosting location. No TLS certificate was presented for the domain, suggesting that HTTPS was not enforced at the time of collection. The page title retrieved during analysis reads "Asil Finspirex - Resmi Platform | AI Ticaret 2025 | 10.000'den Fazla Yorum," which is unrelated to Binance but aligns with the claimed investment‑related narrative.

VirusTotal scanned the domain and recorded detections from 2 of 93 security vendors, and the domain appears on a single external blocklist. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The domain has been reported to and blocked by PhishDestroy, and its status is currently listed as offline. The available evidence confirms that the domain was deliberately created to masquerade as a Binance‑related investment platform, leveraging a generic financial‑oriented page title to lure victims. However, the exact content served to end users, including any credential‑capture forms or payment instructions, has not been captured because the site is offline.

Consequently, the precise phishing or malware delivery mechanisms remain unknown. Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurgence of the same hostnames or IP address, and add the IP 104.21.78.103 to threat‑intel feeds that track Cloudflare‑based malicious infrastructure.