selviorex-pl[.]com

Analysis indicates that the domain selviorex-pl.com was registered on February 21 2026 through Name SRS AB and is hosted on Cloudflare infrastructure (ASN 13335) with the address 172.67.151.69. The domain resolves to Cloudflare’s network and uses the nameservers david.ns.cloudflare.com and desiree.ns.cloudflare.com. No TLS certificate is presented, and the site currently returns no HTTP response because it has been taken offline. The page title observed in earlier crawls – “Selviorex - Oficjalna Platforma | Trading AI 2025 | Ponad 10.000 Opinii” – suggests a Polish‑language trading platform narrative, yet the domain is listed as impersonating the brand argent. The brand‑impersonation classification is corroborated by blocklist entries: PhishDestroy has blocked the domain, Gridinsoft assigns a trust score of 0 / 100, and an AlienVault OTX pulse references it in a single threat‑intel record.

VirusTotal reports two detections out of ninety‑five scanners, confirming that at least a small subset of security vendors consider the site malicious. The domain also appears on one additional security blocklist. The combination of a recent registration date, lack of SSL, low trust scoring, and multiple independent detections highlights a high likelihood that the domain was used for fraudulent activity targeting users of the argent brand. Because the site is offline, direct observation of payloads or credential‑harvesting pages is not possible, leaving the exact malicious mechanisms uncertain.

Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurgence of the same hostnames or IP ranges, and add the domain to internal threat‑intel feeds. Additional investigation of the two VirusTotal detections may reveal specific payload signatures or command‑and‑control patterns. Organizations that reference argent should educate users about the impersonation risk and instruct them to verify URLs before entering credentials.