securionforte[.]world

The domain securionforte.world was observed on three independent security blocklists—PhishDestroy, MetaMask, and SEAL—indicating that multiple protective services have identified it as malicious. DNS resolution points to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The domain uses Cloudflare’s default nameservers amos.ns.cloudflare.com and riya.ns.cloudflare.com, a pattern commonly seen in fast‑flux or abuse‑hosting configurations. Registration data shows the domain was created on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, without a TLS certificate, suggesting the operator did not invest in HTTPS encryption.

VirusTotal reports that 14 of 93 scanned security vendors flagged the domain as malicious, reinforcing the blocklist findings. The Gridinsoft trust score of 0 out of 100 further confirms a high confidence of malicious intent. The site title returned by HTTP requests is “Fezoxiar | Offizielle Website [2025]”, which does not directly reference the targeted brand but the overall profile aligns with the listed scam type of brand impersonation. The specific brand being spoofed is identified as "argent", a financial service, and the domain is categorized as a brand‑impersonation campaign.

Current monitoring indicates the domain is taken offline, yet the historical evidence remains relevant for threat‑intel correlation. Uncertainty remains regarding the exact payload or credential‑collection mechanism because the site content has not been captured and no TLS certificate was present to provide additional metadata. Defenders should continue to block the domain at network perimeter and DNS layers, add the IP 188.114.96.3 to blocklists where feasible, and monitor for any new domains registered by the same registrar or using the same nameserver pair.