fexovion-ca[.]com

On July 24, 2026, fexovion-ca.com was observed as an offline domain that had been registered on February 21, 2026 through the registrar Name SRS AB. The domain resolves to the Cloudflare address 104.21.90.92, which is announced by AS13335 Cloudflare, Inc. and is geolocated to the United States. The authoritative nameservers colette.ns.cloudflare.com and finley.ns.cloudflare.com confirm that the site was hosted behind Cloudflare’s reverse‑proxy service. No TLS certificate was presented when the site was reachable, indicating that the operator did not obtain a valid SSL certificate for the domain. The page title captured during the brief live window was "Fexovion – Official Platform | AI Trading 2025 | Over 10,000 Reviews", and the threat profile lists a brand impersonation of the financial service "argent".

The combination of an attractive AI‑trading narrative and a fabricated review count is consistent with a typical brand‑impersonation scam aimed at luring victims into a fraudulent investment funnel. Detection and blocklist data show that the domain was flagged by seven of ninety‑three VirusTotal scanners and appears on a single security blocklist. The site was subsequently taken offline and is currently blocked by the PhishDestroy sinkhole. Reputation services assign extremely low trust scores: Scamadviser rates the domain 1 out of 100 and Gridinsoft scores it 0 out of 100, reinforcing the malicious classification. The limited exposure—only one blocklist entry and a modest VirusTotal detection count—suggests that the campaign may have been short‑lived or quickly mitigated.

Uncertainty remains regarding the exact phishing kit or the content of the landing page beyond the captured title, as no further forensic capture is available. Additionally, the absence of a TLS certificate prevents validation of any potential credential‑harvesting forms that might have been present. Defenders should continue to monitor the IP address 104.21.90.