majest-fundalis[.]com

The domain majest-fundalis.com was registered on February 21, 2026 through the registrar Name SRS AB and is currently resolved to the IP address 104.21.15.4, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is hosted behind Cloudflare's network and does not present an SSL certificate, indicating that HTTPS was not enforced at the time of observation. Its authoritative nameservers are bjorn.ns.cloudflare.com and harmony.ns.cloudflare.com, both of which are standard Cloudflare name servers. The public-facing page title reads "Majest Fundalis™: Offizielles KI-Trading in Deutschland | Geprüft & Vertrauenswürdig", suggesting a claim of legitimate AI‑driven trading services targeted at German users, but no further page content has been examined. The site is classified as a brand impersonation campaign specifically targeting the cryptocurrency exchange Binance, and it has been flagged by the PhishDestroy blocklist as well as appearing on one additional security blocklist.

Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting an extremely low reputation. VirusTotal analysis shows that two out of ninety‑three security vendors flagged the domain, confirming that at least a minority of scanners consider it malicious. AlienVault OTX lists the domain in one threat‑intel pulse, providing further corroboration of its abusive nature. As of the report date, July 24, 2026, the domain has been taken offline, but its historical activity suggests it was used to lure victims into believing they were interacting with Binance.

Uncertainty remains regarding the exact phishing kit employed, the specific URLs used for credential harvesting, and whether any victim data was exfiltrated before takedown.