blick-montrevex[.]com

Analysis on July 23, 2026 indicates that the domain blick-montrevex.com is actively used for brand impersonation targeting the financial service brand argent. The site resolves to 94.26.38.51, an address located in Bulgaria and assigned to AS202412 Omegatech LTD. The domain was registered on December 8, 2025 via NETIM and uses the nameservers ns1.netim.net, ns2.netim.net, ns3.netim.net. The web server presents an Nginx/OpenResty stack with IPinfo integration and serves an HTTP 200 response. The TLS certificate is issued by Let's Encrypt (E8), confirming the use of a free, automated certificate. The page title returned by the server is "Blick Montrevex | Offizielle Website 2025", which does not reference the impersonated brand and suggests a generic landing page.

Google Safe Browsing categorises the URL as social engineering, and the domain appears on three blocklists (PhishDestroy, MetaMask, SEAL). VirusTotal records 15 of 95 scanners flagging the domain, reinforcing the malicious assessment. Additional trust metrics are extremely low: Gridinsoft gives a score of 0/100, and Scamadviser reports 1/100. These scores, together with the blocklist presence, indicate a high likelihood of phishing activity. The specific scam type is listed as "Social Media Phishing", implying that the site is likely used to harvest credentials through deceptive links posted on social platforms.

While the exact phishing page content has not been publicly disclosed, the combination of registry, hosting, and detection data points to a purposeful malicious infrastructure. Uncertainty remains around the precise tactics employed on the landing page and whether any credential harvesting forms are present. Defenders should block or monitor traffic to blick-montrevex.com, add the domain to internal deny lists, and implement URL filtering that references Google Safe Browsing and the listed blocklists.