finovex[.]digital

Analysis of finovex.digital shows the domain is actively hosting a site that returns HTTP 200 and carries the page title “CryptoSchool — Arbitrage Mastery.” The domain resolves to IP 188.114.96.3, which belongs to Cloudflare, Inc. in Canada, and uses Cloudflare’s authoritative nameservers ziggy.ns.cloudflare.com and jasper.ns.cloudflare.com. Registration details list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar, and the TLS certificate is issued by Google Trust Services under the WE1 root, indicating a valid HTTPS endpoint. VirusTotal scans have flagged the domain by four of ninety‑one security vendors, and the site appears on a single public blocklist while also being listed by PhishDestroy as a blocked phishing resource. These indicators collectively demonstrate that the infrastructure is deliberately configured to lend legitimacy to a phishing operation targeting users interested in cryptocurrency arbitrage. The precise content of the landing page, any credential‑capture mechanisms, or the specific victim demographic have not been disclosed in the available intelligence, leaving the exact attack vector uncertain. Defenders should immediately block DNS resolution for finovex.digital, enforce HTTPS inspection to capture any malicious payloads, and monitor outbound traffic for connections to the Cloudflare‑hosted IP address. Ongoing threat‑intel feeds should be consulted for any updates on payload signatures or associated phishing campaigns.