slide-amrix-sys[.]net

Analysis of slide-amrix-sys.net indicates a high‑risk brand‑impersonation operation targeting the "base" brand. The domain was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare’s network (AS13335) with the IP address 104.21.60.138 located in the United States. DNS resolution uses Cloudflare nameservers gigi.ns.cloudflare.com and venkat.ns.cloudflare.com, and the site currently presents no SSL certificate, leaving all traffic unencrypted. The page title observed during the brief offline capture reads "Slide Amrix Sys - Plataforma Oficial | Trading IA 2026," confirming an attempt to convey a legitimate trading platform.

The site has been flagged by multiple security entities: PhishDestroy, MetaMask, and SEAL have listed it as blocked, and it appears on three additional blocklists. Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal reports that 12 out of 95 scanned security vendors flag the domain as malicious, reinforcing the assessment. AlienVault OTX includes the domain in one threat‑intelligence pulse, providing further corroboration of its malicious nature.

The domain’s current status is offline, but historical activity suggests it was used to impersonate the targeted brand and potentially harvest credentials or financial information. Defenders should continue to block the domain at DNS and proxy layers, monitor for any residual traffic to the associated IP address, and update endpoint and web‑gateway signatures to include the observed indicators. Incident response teams should also verify that no internal users accessed the site before its takedown, and consider outreach to the legitimate brand to coordinate mitigation efforts.