vertex555xzorex[.]com

Analysis of vertex555xzorex.com confirms its classification as a phishing domain impersonating the Base brand, currently offline as of July 24, 2026. The domain was registered on February 21, 2026, through Gransy, s.r.o., and resolves to IP address 172.67.144.140, hosted on Cloudflare's infrastructure (AS13335) in the United States. No SSL certificate is present, increasing the risk of unencrypted data interception. The page title, "Vertex 555X Zorex - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni," suggests the site masqueraded as an official trading platform, though the exact content and functionality remain unconfirmed due to its offline status.

Infrastructure analysis reveals the domain uses Cloudflare nameservers (heather.ns.cloudflare.com and joaquin.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns. It appears on one security blocklist (PhishDestroy) and is flagged by Gridinsoft with a trust score of 0/100, indicating high confidence in its malicious nature. AlienVault OTX records the domain in one threat intelligence pulse, further supporting its association with phishing activity. While VirusTotal shows minimal detection (1 of 93 vendors), this does not diminish the domain's confirmed malicious status, as detection rates often lag behind initial takedowns.

The domain is linked to social media phishing, a tactic frequently used to harvest credentials or distribute fraudulent investment schemes. Defenders should treat this domain as compromised and block it at the DNS and network levels. Given its Cloudflare hosting, monitoring for re-emergence under similar naming conventions or IP ranges is recommended. No evidence suggests the domain was used for malware distribution or other threat types beyond brand impersonation and phishing.