alphamovix32[.]com

Analysis of alphamovix32.com shows a newly registered domain (creation date February 21 2026) that is being used for brand impersonation targeting the argent brand. The domain was registered through Metaregistrar BV and delegated to Cloudflare nameservers becky.ns.cloudflare.com and wesley.ns.cloudflare.com. DNS resolution points to IP 188.114.97.3, an address owned by Cloudflare, Inc. (AS13335) located in the United States. No TLS certificate was observed, indicating the site was served without HTTPS. The page title retrieved prior to takedown reads “AlphaMovix 3.2 - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”, which aligns with the scam narrative but provides no direct visual evidence.

Security telemetry shows the domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal recorded a single positive detection out of 93 scanning engines, and Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious assessment. The current status is offline, limiting real‑time inspection of payloads or page behavior. Defenders should treat alphamovix32.com as a confirmed brand‑impersonation threat.

Recommended mitigations include adding the domain to DNS and proxy block lists, denying outbound connections to its resolving IP, and monitoring for any future registrations that reuse the same Cloudflare nameserver pattern. Threat‑intel sharing platforms should be updated with the registrar, nameserver, and IP details to aid correlation with similar campaigns. Because the site is no longer reachable, investigators should focus on historical logs for any client requests to the domain and consider forensic capture of any remnants that may have been cached by browsers or security products. Continued observation of the argent brand’s digital footprint is advised to detect any derivative impersonation attempts that may arise from this infrastructure.