proyeccionfinancieraz[.]com

Analysis of proyeccionfinancieraz.com indicates a confirmed phishing site targeting financial planning or advisory services. The domain was registered on June 2, 2024, through GoDaddy.com, LLC, and is currently active as of July 27, 2026. It resolves to the IP address 188.114.96.3, which is associated with Cloudflare's infrastructure, as evidenced by its nameservers sasha.ns.cloudflare.com and yadiel.ns.cloudflare.com. This configuration is commonly observed in phishing campaigns leveraging Cloudflare's CDN and proxy services to obscure the origin server and evade detection. The domain appears on at least one security blocklist, having been flagged by PhishDestroy.

While VirusTotal scans conducted by 91 vendors returned no detections, this absence does not confirm the domain's safety; it merely reflects that no signatures or heuristics matched at the time of scanning. Defenders should note that phishing domains often remain undetected in automated scans until sufficient telemetry or manual review identifies malicious intent. Infrastructure analysis reveals no additional indicators such as ASN details, SSL anomalies, or HTTP response irregularities in the provided data. The exact content and target brand of the phishing site remain unconfirmed, as no page title, kit, or specific scam type (e.g., investment fraud, credential harvesting) is identified in the available intelligence.

The domain's name, proyeccionfinancieraz.com, suggests a focus on financial projection or planning services, which aligns with common phishing themes aimed at individuals seeking financial advice or investment opportunities. Organizations and security teams are advised to treat this domain as high-risk until further analysis is conducted. Immediate actions should include blocking the domain at the DNS and proxy levels, monitoring for connections to 188.114.96.3, and reviewing logs for any interactions with the domain or its associated IP.