fivoraviks-kripto[.]net

Analysis of the domain fivoraviks-kripto.net indicates a high-risk brand impersonation campaign targeting Argent, a cryptocurrency service. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with phishing and fraudulent activities. Infrastructure analysis reveals the domain resolves to IP address 188.114.97.3, hosted on Cloudflare's network (AS13335), a common tactic to obscure the true origin of malicious sites. No SSL certificate was detected, increasing the likelihood of interception or manipulation of user data. The page title, 'Fivoraviks Kripto - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis,' explicitly claims affiliation with an official trading platform, leveraging social proof (e.g., '10,000 reviews') to deceive users.

This aligns with the known scam type: brand impersonation, specifically targeting Argent. Detection metrics further support the malicious classification: 12 of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. AlienVault OTX includes the domain in one threat intelligence pulse, suggesting prior tracking by the security community. Trust scores from Scamadviser and Gridinsoft both rate the domain at 1/100 and 0/100, respectively, indicating negligible legitimacy.

The domain is currently offline, which may reflect takedown efforts or a temporary pause in operations. Defenders should treat this domain as confirmed malicious and prioritize blocking it at the DNS and network levels. Organizations using Argent or similar crypto services should alert users to this impersonation attempt and monitor for related infrastructure, such as Cloudflare-hosted domains registered through PublicDomainRegistry.com. Further investigation into the hosting provider and registrar may reveal additional linked domains or campaigns.