voltara-flex[.]com

The domain voltara-flex.com was registered on February 21, 2026 through the registrar Name SRS AB and presently resolves to the Cloudflare address 172.67.146.123, which is located in the United States under ASN 13335 (Cloudflare, Inc.). No SSL certificate was observed for the site, indicating that HTTPS was not enabled at the time of analysis. The page title returned by the server reads “Voltara Flex™: Offizielles KI‑Trading in Deutschland | Geprüft & Vertrauenswürdig”, and the domain is explicitly marked as impersonating the Binance brand. Intelligence from AlienVault OTX records the domain in a single threat‑intel pulse, and it appears on one external security blocklist.

The domain is currently listed as taken offline, and PhishDestroy has also blocked it. On VirusTotal, five of ninety‑three scanned security vendors flagged the domain as malicious, reinforcing the suspicion of illicit activity. Gridinsoft assigned a trust score of 0 out of 100, confirming a lack of confidence in the domain’s legitimacy. The identified scam type is “Social Media Phishing”, suggesting that attackers may have used the domain to lure victims via social platforms, possibly directing them to the German‑language trading page that mimics official Binance communications.

While the exact payload or credential‑capture mechanisms have not been disclosed, the combination of brand impersonation, absence of TLS, low trust rating, and multi‑vendor detections indicates a high likelihood of fraudulent intent. Defenders should continue to block the domain at perimeter filters, update URL filtering lists with the observed indicator set, and monitor for any related C2 infrastructure tied to the Cloudflare IP range. Incident response teams should also advise users to avoid any unsolicited Binance‑related outreach that references this domain, and enforce strict verification of Binance communications to mitigate social‑media phishing attempts.