nalviros-pl[.]com

Analysis of nalviros-pl.com shows a newly registered domain created on February 21, 2026 and currently taken offline. The domain was registered through Name SRS AB and is served by Cloudflare nameservers everton.ns.cloudflare.com and jewel.ns.cloudflare.com. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate was observed for the site, indicating an unencrypted HTTP endpoint.

The page title retrieved during a brief scan reads "Nalviros - Oficjalna Platforma | Trading AI 2025 | Ponad 10.000 Opinii," suggesting an attempt to present a Polish‑language trading platform. The threat classification is brand impersonation, specifically targeting the financial brand argent. VirusTotal analysis recorded a single positive detection out of 95 security vendors, and AlienVault OTX listed the domain in one threat‑intelligence pulse. The domain is blocked by PhishDestroy and appears on one additional security blocklist.

Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. While the domain is no longer reachable, its recent creation date, lack of TLS, low trust score, and the presence of a positive vendor flag collectively indicate a purposeful phishing campaign. Defenders should continue to block any traffic to nalviros‑pl.com, monitor for reuse of the underlying Cloudflare IP address, and add the domain to internal deny lists. Threat‑intel teams should also watch for similar brand‑impersonation patterns that reference the same page title or use the same registrar, as these may indicate a broader campaign infrastructure.