riventrustinvest[.]com

Analysis of riventrustinvest.com indicates a newly registered domain created on 21 February 2026 that is currently taken offline. The domain resolves to the Cloudflare edge address 188.114.96.3, which is associated with AS13335 Cloudflare, Inc., and is served by the Cloudflare nameservers colette.ns.cloudflare.com and finley.ns.cloudflare.com. No TLS certificate is presented, confirming that the site does not use HTTPS. Registration was performed through Name SRS AB, a registrar known for low‑cost bulk registrations.

The page title retrieved from the site, “Riven Trust - Official Platform | AI Trading 2025 | Over 10,000 Reviews”, suggests an investment‑oriented narrative that aligns with the listed scam type of an investment scam impersonating the brand Argent. The domain has been placed on a single security blocklist and is actively blocked by PhishDestroy. Independent scanning on VirusTotal recorded detections by two of ninety‑five security vendors, and AlienVault OTX reports the indicator in one threat‑intel pulse, indicating that external detection engines have begun to flag the indicator. Gridinsoft’s trust score of 0 out of 100 further reflects a high confidence of malicious intent.

The absence of SSL, the offline status, and the lack of additional public infrastructure such as dedicated hosting or content delivery beyond Cloudflare limit current visibility into the payload or phishing pages that may have been served. Defenders should continue to block the domain at perimeter controls, monitor for any re‑appearance on other blocklists, and consider adding the indicator to internal threat‑intel feeds. Ongoing observation of the associated IP address for any new domains or malicious activity is recommended, as Cloudflare’s shared infrastructure can be leveraged for future campaigns. Until the site is re‑hosted, no further technical artifacts such as malware samples or credential‑phishing forms can be confirmed.