levier-yieldex[.]com

Analysis of the domain levier-yieldex.com indicates active participation in a staking scam, as classified by multiple security blocklists. The domain was registered on February 21, 2026, through NETIM SAS, a registrar commonly associated with fraudulent infrastructure. It currently resolves to the IP address 172.245.112.196, hosted on AS36352 (HostPapa) in the United States. The page title, 'Levier Yieldex | Plateforme de Trading Alimentée par l’IA – Site Web Officiel,' suggests an attempt to impersonate a legitimate trading platform, though no specific brand affiliation has been confirmed beyond the self-declared name. Infrastructure analysis reveals the use of Nginx and OpenResty, technologies frequently employed in both legitimate and malicious web applications. The domain is secured with a Let’s Encrypt SSL certificate (serial number E7), a common tactic to lend an appearance of legitimacy. MX records point to mx1.netim.net and mx2.netim.net, indicating email services are likely routed through the same provider as the domain registration. Detection metrics remain limited but concerning: two of ninety-three security vendors on VirusTotal flag the domain as malicious. Additionally, it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which specifically classify it as a staking scam. The Gridinsoft trust score of 0/100 further corroborates its high-risk status. Defenders should treat this domain as an active threat. Network-level blocking of 172.245.112.196 and associated nameservers (ns1.netim.net, ns2.netim.net, ns3.netim.net) is recommended. Given the domain’s recent registration and consistent detection across multiple sources, continued monitoring for related infrastructure or newly registered lookalike domains is advised. The exact content and functionality of the site remain unanalyzed, but the available evidence supports immediate mitigation measures.