precieux-valexor[.]net

On 23 July 2026, the domain precieux-valexor.net was observed as a high‑risk brand‑impersonation campaign targeting the financial brand argent. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare address 104.21.32.37, which is associated with ASN 13335 in the United States. No TLS certificate is presented, indicating the site was served over plain HTTP at the time of capture. VirusTotal reports that 12 of 93 scanning engines flagged the domain as malicious, suggesting a consensus of suspicious behavior among reputable vendors.

The domain appears on three independent security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the perception of abuse. Gridinsoft assigns a trust score of 0 out of 100, and AlienVault OTX lists the domain in a single threat‑intelligence pulse, providing additional corroboration. The public page title “Précieux Valexor - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis” was captured, but the content of the page has not been publicly disclosed, leaving the exact lure technique unknown. Nameservers aryanna.ns.cloudflare.com and tate.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure.

The site is currently offline, preventing immediate interaction, yet the observed infrastructure components remain reusable for future campaigns. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor the associated IP address and Cloudflare nameservers for reuse, and add the domain to internal watchlists. Further analysis of any archived HTTP payloads would be required to determine the specific phishing vector and any credential‑harvesting forms employed.