polvestiapro[.]pl
“PolvestiaPro”
Riepilogo delle prove
On 23 July 2026, polvestiapro.pl was identified as a high‑risk brand‑impersonation site targeting the financial services brand Argent. The domain was registered on 21 February 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and is hosted on Cloudflare infrastructure (AS13335). DNS resolution points to 188.114.97.3, an IP address located in the United States and served by Cloudflare’s edge network. The authoritative nameservers are kip.ns.cloudflare.com and olivia.ns.cloudflare.com. No TLS certificate was observed, indicating the site was served without HTTPS.
The only visible page element is the HTML title “PolvestiaPro”, which does not reference Argent and suggests that the landing page content has not been publicly disclosed. Security telemetry shows the domain appears on three independent blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports that 13 of 93 scanned antivirus engines flagged the domain as malicious. AlienVault OTX lists the domain in a single threat‑intelligence pulse. The combination of a newly created domain, Cloudflare‑based hosting, lack of TLS, and multiple vendor detections aligns with typical infrastructure used for credential‑harvesting campaigns.
Current operational status is offline, which may indicate takedown or temporary suspension. Defenders should continue to block the domain and its resolved IP at perimeter and endpoint controls, add the domain to internal threat‑intel feeds, and monitor for any re‑registration or use of the same IP range. Continued observation of the associated blocklists and OTX pulse is advised to detect possible resurgence. The lack of publicly available page content limits further attribution, and analysts should treat any future reappearance as a high‑confidence impersonation attempt aimed at Argent users.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo