the-voltixmomentumapp-com[.]trackfinanceworld[.]com

The domain the-voltixmomentumapp-com.trackfinanceworld.com is currently active and has been classified as a high‑risk generic phishing site. Registration records show the domain was created on January 30, 2025 and is hosted on Cloudflare infrastructure (AS13335) with the IP address 104.26.8.162, located in the United States. DNS resolution uses the Cloudflare nameservers conrad.ns.cloudflare.com and fish.ns.cloudflare.com. The site presents a page titled "Voltix Momentum ™ - The Official App WebSite 2025 [UPDATED]" and delivers an HTTP 302 redirect. TLS is terminated by a Google Trust Services certificate issued to "WE1", indicating the use of standard Cloudflare SSL termination. Technical fingerprints reveal the inclusion of Google Hosted Libraries, Google Font API, and Cloudflare services. Threat intelligence sources indicate the domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal scans have flagged 12 of 95 security vendors, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. While the exact phishing payload has not been publicly disclosed, the combination of redirection, brand‑specific page title, and low trust scores suggests a credential‑harvesting campaign targeting users of the Voltix Momentum application. Defenders should add the domain to blocklists, enforce DNS sinkholing, and monitor outbound traffic for connections to 104.26.8.162. Continuous re‑evaluation is advised as the site remains active and may evolve its tactics.