delontraxisai[.]com

On 21 February 2026 the domain delontraxisai.com was registered through Metaregistrar BV. The registration date places the infrastructure in the current calendar year, and the domain resolves to 172.67.201.189, an address owned by Cloudflare, Inc. (AS13335) located in the United States. Both authoritative nameservers are Cloudflare‑provided (clark.ns.cloudflare.com and edna.ns.cloudflare.com). No TLS certificate is presented, indicating that the site served HTTP only or that the certificate was removed after takedown.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious use. The page title retrieved prior to takedown reads “Delontraxis - Oficjalna Platforma | Trading AI 2025 | Ponad 10.000 Opinii”, which references a trading‑AI service and includes a Polish phrase suggesting a localised lure. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis shows that one of ninety‑three scanned vendors flagged the domain, confirming at least one detection.

The campaign is classified as brand impersonation targeting Binance, although the exact content of the landing page has not been publicly disclosed. Current status is offline, but the hosting provider and DNS configuration remain active and could be reused. Defenders should add delontraxisai.com to URL filtering and intrusion‑prevention rules, monitor for any future resolution to the same Cloudflare IP range, and correlate logs for attempts to contact the domain or its IP. Because the registrar is not a high‑risk registrar, the primary mitigation focus should be on the observed IP, DNS records, and the brand‑specific indicator (Binance) to prevent credential‑stealing or fraudulent transaction attempts.