kredisvorex[.]com

Analysis of kredisvorex.com shows a high‑risk brand‑impersonation campaign targeting the Argent brand. The domain was registered on February 21, 2026 through Name SRS AB and resolves to the Cloudflare address 172.67.135.65, which is associated with ASN 13335 in the United States. The site lacks an SSL certificate, and its page title is reported simply as "Kredisvorex," offering no additional context about the content served.

Infrastructure checks reveal a Gridinsoft trust score of 0 out of 100 and a presence on three external blocklists, specifically PhishDestroy, MetaMask, and SEAL. The domain appears in a single AlienVault OTX pulse and is flagged by Google Safe Browsing for social engineering, consistent with the classified scam type of social‑media phishing. VirusTotal analysis records 14 detections out of 93 security vendors, indicating that multiple scanners have identified malicious characteristics.

Nameserver records point to hal.ns.cloudflare.com and sunny.ns.cloudflare.com, confirming Cloudflare’s DNS hosting. The domain is currently offline, but its recent creation date and the combination of low trust scoring, blocklist listings, and multi‑vendor detections suggest an active threat infrastructure that may be re‑activated or reused for future campaigns. Defenders should proactively block the domain and its resolving IP, update intrusion detection signatures to include the observed indicators, monitor for similar domains registered through the same registrar, and enforce strict email and social‑media content filtering for references to Argent to mitigate potential credential‑ harvesting attempts.