nalviros-uk[.]com

Analysis of the domain nalviros-uk.com indicates a confirmed brand impersonation campaign targeting Binance users. The domain was registered on February 21, 2026, through registrar Name SRS AB and resolved to IP 188.114.97.3, hosted on Cloudflare's AS13335 infrastructure in the United States. No SSL certificate was present at the time of assessment. The page title, 'Nalviros - Official Platform | AI Trading 2025 | Over 10,000 Reviews,' explicitly references AI trading, a common lure in cryptocurrency-related scams, and falsely claims official status to deceive visitors.

Detection data shows the domain was flagged by 2 of 95 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. AlienVault OTX recorded the domain in a single threat intelligence pulse, confirming its malicious classification. Gridinsoft assigned a trust score of 0/100, further supporting its fraudulent nature. As of July 24, 2026, the domain has been taken offline, though residual DNS records list Cloudflare nameservers jocelyn.ns.cloudflare.com and maciej.ns.cloudflare.com.

While the exact content and functionality of the site remain unanalysed, the available indicators—brand impersonation, lack of encryption, and detection by security vendors—confirm malicious intent. Defenders should treat this domain as a high-confidence threat and block it at the DNS and proxy levels. Historical logs should be reviewed for connections to 188.114.97.3 or nalviros-uk.com to identify potential compromise. No evidence suggests this domain was part of a broader phishing kit or campaign beyond the observed indicators.