skupiny-cez[.]com

The domain skupiny-cez.com was registered on February 21, 2026 through the registrar SRS AB and is currently listed as offline. DNS resolution points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain uses the Cloudflare nameservers morgan.ns.cloudflare.com and olga.ns.cloudflare.com, but no SSL certificate was observed at the time of analysis, indicating that HTTPS was not configured. The page title returned by the HTTP service reads "Skupiny ČEZ - Oficiální platforma | AI‑Trading 2025 | Více než 10 000 hodnocení," and the site explicitly claims to impersonate the brand argent.

Threat intelligence sources label the activity as brand impersonation with an elevated risk rating. Detection data show that six of ninety‑three security vendors on VirusTotal flagged the domain, and AlienVault OTX contains one pulse referencing it. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist. PhishDestroy has taken the domain offline, and it is currently blocked by that service.

While the available evidence confirms the domain’s use in a brand‑impersonation campaign targeting argent, the exact content of the site, the presence of any credential‑stealing forms, or additional malicious payloads were not captured before the takedown. Defenders should continue to monitor the IP address 188.114.96.3 for any re‑use of the infrastructure, enforce blocklists that include this domain, and consider adding the domain to internal URL filtering policies. Because the domain lacks TLS, any future activation would be vulnerable to interception, but the primary mitigation remains the removal of the domain from user‑accessible resources and ongoing observation of related Cloudflare‑hosted assets.