harborvaltrix-invest[.]com

harborvaltrix-invest.com is currently flagged as an impersonation site targeting Binance. The domain was registered on February 21, 2026 through Name SRS AB and uses Cloudflare nameservers (andronicus.ns.cloudflare.com, chan.ns.cloudflare.com). It resolves to 172.67.151.195, an IP owned by AS13335 Cloudflare, Inc., located in the United States. No SSL certificate is presented, indicating HTTP‑only service.

The site title observed during the brief crawl reads “Harbor Valtrix - Official Platform | AI Trading 2025 | Over 10,000 Reviews”, which aligns with the listed scam type of an investment scam. The domain has been added to at least one public blocklist and received a trust score of 0/100 from Gridinsoft, reflecting a high confidence of malicious intent. PhishDestroy has taken the domain offline, and the current status is reported as offline. AlienVault OTX lists the domain in a single threat intelligence pulse, and VirusTotal recorded a single positive detection out of 93 scanning engines.

The evidence suggests the domain was used to lure victims by presenting a fabricated AI‑trading platform that pretends to be affiliated with Binance. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms, as no detailed page content or network traffic has been captured. Defenders should continue to block the domain at network perimeters, update DNS filtering rules, and monitor for any residual requests to the associated IP address. Incident response teams should also search for related indicators such as the Cloudflare nameservers and the registration details in internal logs, and consider sharing the indicator set with upstream threat‑sharing platforms to aid broader mitigation.