iqbitmoldova[.]com

Iqbitmoldova.com was registered on September 25 2025 through DevExpanse Ltd d/b/a Regery.com. The authoritative nameservers are buck.ns.cloudflare.com and lana.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s network (ASN 13335, United States). DNS resolution points to IP 172.67.180.86, a Cloudflare edge address. No SSL certificate is presented for the domain, meaning HTTPS connections would be terminated without a valid certificate. The site’s HTML title, as observed in a single capture, reads “iqBit - Platformă oficială de tranzacționare 【Actualizat】”, and the domain is classified as a brand‑impersonation campaign targeting the brand “argent”.

Security telemetry shows the domain appears on one blocklist and is specifically blocked by PhishDestroy. VirusTotal scans have returned four positive detections out of ninety‑five antivirus engines, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The overall risk level is marked elevated, and the domain’s current operational status is offline, suggesting the malicious infrastructure may have been taken down or is temporarily inactive. Analysts lack visibility into the full payload or credential‑harvesting mechanisms because no page content beyond the title has been publicly captured.

Consequently, the exact phishing vector, malicious scripts, or credential‑capture forms remain unknown. Defenders should continue to enforce DNS‑level blocking of iqbitmoldova.com, monitor for any re‑activation of the domain, and include the associated IP address 172.67.180.86 in network‑level deny lists. Additional scrutiny of traffic to Cloudflare edge nodes that resolve to this IP is advised, as other malicious domains may share the same infrastructure. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in detection rates or new indicator updates.