senvix-invest[.]net

On 24 July 2026 analysts observed that the domain senvix-invest.net is associated with a brand‑impersonation campaign targeting the financial brand argent. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and delegated to Cloudflare nameservers khalid.ns.cloudflare.com and pola.ns.cloudflare.com. DNS resolution points to the Cloudflare edge address 172.67.212.242, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate is presented, indicating the site was served without HTTPS. The public page title retrieved before takedown reads “Senvix - Oficiální platforma | AI‑Trading 2025 | Více než 10 000 hodnocení”, suggesting an investment‑oriented lure that claims extensive user ratings.

The campaign is classified as an investment scam and explicitly impersonates the brand argent. Infrastructure indicators show a zero trust score from Gridinsoft (0/100) and placement on three independent security blocklists. The domain is currently blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple threat‑intel feeds have flagged it. VirusTotal scans recorded detections by two of ninety‑three AV engines, providing additional corroboration of malicious intent. The site’s status is listed as offline at the time of reporting, which may be the result of takedown actions or temporary withdrawal by the operators.

Uncertainty remains regarding the exact payload delivered to victims, as no sample URLs or malicious binaries have been disclosed. The lack of an SSL certificate limits the ability to inspect encrypted traffic, but the use of Cloudflare’s public infrastructure is typical for fast‑flux or proxy‑based campaigns. Defenders should continue to monitor the domain’s DNS records for re‑activation, enforce blocklists that include senvix‑invest.net, and apply URL filtering rules that reference the observed page title and associated keywords.