olutrixonai[.]com

Analysis of the domain olutrixonai.com indicates an elevated‑risk brand impersonation campaign targeting the brand “base.” The domain was registered on 21 February 2026 through REALTIME REGISTER B.V. and resolves to the IP address 104.21.85.217, which belongs to the Cloudflare network (AS13335) and is geolocated to the United States. DNS resolution is served by the Cloudflare authoritative nameservers lina.ns.cloudflare.com and piotr.ns.cloudflare.com. No TLS certificate is presented, implying that the site was operating without HTTPS protection at the time of capture. The hosted page carries the title “Olutrixon - Piattaforma Ufficiale Italia | Trading IA 2026,” a linguistic pattern that aligns with typical brand‑impersonation tactics but does not directly reference the targeted brand. Public threat‑intel aggregators have logged the domain on three separate blocklists, and commercial filtering services PhishDestroy, MetaMask, and SEAL have each listed it as malicious.

VirusTotal scans show four of ninety‑five security vendors flagging the domain, reinforcing the suspicion of malicious intent. Independent reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, indicating a complete lack of confidence in the domain’s legitimacy. Current infrastructure checks report the domain as taken offline, which may reflect either a rapid takedown or a temporary suspension by the hosting provider. Because the site is not actively serving content, visual or functional characteristics remain unavailable for further verification.

No evidence of active login pages or credential harvesting forms has been captured, and the lack of an SSL certificate prevents verification of any data exfiltration mechanisms. The short lifespan—from registration to detection within a few months—suggests a fast‑flux approach typical of opportunistic impersonation operators. Defenders should continue to enforce blocklists that include olutrixonai.