revaloninvest[.]com

Analysis of revaloninvest.com shows multiple indicators of malicious activity. The domain was registered on February 21, 2026 through Dynadot Inc and resolves to IP address 188.114.96.3, which is hosted by Cloudflare, Inc. in Canada. DNS resolution uses the Cloudflare nameservers eva.ns.cloudflare.com and lamar.ns.cloudflare.com, and the site returns HTTP status code 200 over a valid Let’s Encrypt certificate (certificate identifier YE2). The page title, "RevalonInvest — KI-Handelsplattform für smarte Anleger," suggests an investment‑related offering, matching the classified scam type of Investment Scam. Reputation data is uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, and the domain is listed on three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 15 of 95 security vendors flagging the domain, reinforcing the risk assessment. Current status is active, indicating the site is still reachable. While the content beyond the title has not been examined, the combination of low trust score, multiple vendor detections, blocklist listings, and the investment‑oriented title justifies a high‑risk rating. Defenders should block revaloninvest.com at network perimeter and endpoint filters, monitor DNS queries for the associated IP and nameservers, and continue to observe for any changes in hosting or content that could affect threat posture.