bitrevo-circle[.]net

Analysis as of July 25, 2026 indicates that the domain bitrevo-circle.net is currently offline but was previously used to impersonate the financial brand Argent. The site presented the page title “Bitrevo Circle – Official Platform | AI Trading 2025 | Over 10,000 Reviews”, which aligns with a typical brand‑impersonation lure. Registration data show the domain was created on 28 October 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com, and it resolves to the Cloudflare address 188.114.97.3 (AS13335, United States). No TLS certificate was observed, confirming the absence of HTTPS protection. The domain is listed on one security blocklist and is flagged by Google Safe Browsing for social‑engineering content.

PhishDestroy also blocks the host. Reputation services assign extremely low trust scores: Scamadviser 1/100 and Gridinsoft 0/100. VirusTotal analysis reports that seven of ninety‑five scanning engines flagged the domain, reinforcing the suspicion of malicious activity. AlienVault OTX includes the domain in a single threat‑intel pulse, providing additional corroboration. The nameservers clarissa.ns.cloudflare.com and rick.ns.cloudflare.com indicate reliance on Cloudflare DNS.

Because the site is offline, active payload delivery cannot be confirmed, and no SSL/TLS handshake was captured, leaving the exact phishing kit or credential‑capture method unknown. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑activation of the IP address or similar Cloudflare‑hosted domains, and update any URL filtering lists with the observed indicators. Indicator of compromise (IOC) collection includes the domain name, the resolved IP 188.114.97.3, the two Cloudflare nameservers, the page title string, and the registration details. Ongoing vigilance is advised, especially for users of Argent services, to prevent potential credential harvesting attempts that may re‑emerge under a different sub‑domain or hosting arrangement.