solvexprime94[.]net

The domain solvexprime94.net was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the Cloudflare address 172.67.196.47, belonging to AS13335 Cloudflare, Inc., and is served from the United States. The authoritative nameservers are dana.ns.cloudflare.com and garrett.ns.cloudflare.com, indicating the use of Cloudflare's DNS and CDN services. No TLS certificate is presented, leaving the site without encrypted transport. The page title observed during the short‑lived scrape reads “SolvexPrime 9.4 – Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”, which aligns with a crypto‑focused investment narrative. The domain is explicitly listed as impersonating the brand argent, and the overall scam classification is recorded as a crypto scam.

Infrastructure reputation is extremely low: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist. VirusTotal analysis shows that 2 of 93 scanners flagged the domain, confirming that at least a minority of AV engines recognize malicious characteristics. PhishDestroy has also blocked the domain. The site is currently offline, as indicated by the status field, which limits immediate interaction but does not remove the threat from historical logs or future re‑use.

Uncertainty remains regarding the precise payload delivered to victims, as no forensic capture of the landing page content is available beyond the title. The absence of a TLS certificate suggests a low‑effort deployment, but the use of Cloudflare may mask the true origin of the malicious server. Defenders should update IDS/IPS signatures to include the host 172.67.196.47 when associated with the domain name, add solvexprime94.net to URL filtering and reputation lists, and monitor for any re‑registration or similar domain patterns using the same registrar.