strom-monrevox[.]com

Analysis of strom-monrevox.com shows a high‑risk brand‑impersonation campaign targeting the Argent brand. The domain was registered on December 09, 2025 through NETIM and is hosted on an IP address (94.26.38.51) located in Bulgaria and assigned to AS202412 Omegatech LTD. The DNS configuration uses three NETIM nameservers (ns1.netim.net, ns2.netim.net, ns3.netim.net). The web server reports HTTP 200 responses and runs Nginx with OpenResty, while IPinfo is also detected on the page.

The site presents a TLS certificate from Let’s Encrypt (R13), indicating proper encryption but offering no protection against malicious content. The page title "Strøm Monrevox | Offisiell nettside for 2025" does not reference the Argent brand, suggesting the malicious landing page is likely a placeholder or a redirected phishing portal. VirusTotal scans have flagged the domain in 17 of 95 security vendor engines, and the domain appears on one public security blocklist and is blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious classification.

AlienVault OTX reports the domain in a single threat‑intelligence pulse, further corroborating its involvement in social‑media phishing. The campaign is currently active, and defenders should treat the domain as hostile. Immediate mitigation steps include adding strom-monrevox.com and its resolving IP (94.26.38.51) to network blocklists, updating URL filtering rules, and monitoring for any associated command‑and‑control traffic. Continuous re‑evaluation is advised, as additional indicators may emerge from future scans or threat‑intel feeds.