zlovimaxai[.]com

On 24 July 2026, the domain zlovimaxai.com was observed hosting a brand‑impersonation page targeting the financial service brand argent. The site’s HTML title, “Zlovimax Ai – Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas”, suggests a fraudulent trading‑AI offering and does not reference the impersonated brand, but the intelligence classification identifies it as a brand‑impersonation campaign. The domain was registered on 21 February 2026 through Name SRS AB and resolves to the Cloudflare edge address 172.67.168.9, which belongs to ASN 13335 (Cloudflare, Inc.) and is geolocated in the United States. No TLS certificate is presented; the site served HTTP without encryption, which is typical of quick‑turn scam deployments.

DNS is delegated to ariadne.ns.cloudflare.com and piotr.ns.cloudflare.com, confirming use of Cloudflare’s DNS infrastructure. The domain appears on a single security blocklist and is flagged by PhishDestroy, while VirusTotal scans show two of ninety‑three AV engines flagging the domain as malicious. AlienVault OTX reports the domain in one threat‑intel pulse, reinforcing its malicious reputation. Gridinsoft assigns a trust score of 1 out of 100, indicating an extremely low confidence rating.

The site is currently offline, limiting immediate verification of payloads or credential‑harvesting pages. Defenders should block the domain at network perimeter and DNS resolvers, monitor for any residual traffic to the associated IP address, and consider adding the IP to threat‑intel feeds. Ongoing collection of HTTP response headers, redirects, and potential payloads is recommended should the site become active again, as the current evidence is limited to registration and infrastructure attributes.