swap-chenix-cap[.]net

The domain swap-chenix-cap.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. Its authoritative nameservers, art.ns.cloudflare.com and jen.ns.cloudflare.com, resolve to the Cloudflare edge network (AS13335) and point to the IP address 188.114.97.3, which is geolocated to the United States. No TLS certificate is present, meaning the site would have been served over plain HTTP if accessed. The page title observed during the brief crawl reads "Swap Chenix Cap - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis," indicating a claim of an official trading platform and referencing 2025, a clear misalignment with the target brand "argent" listed in the intelligence.

The domain is flagged in three external security blocklists and has a Gridinsoft trust score of 0 out of 100, reinforcing its malicious reputation. VirusTotal scans reported 14 detections out of 95 security vendors, and the domain appears in a single AlienVault OTX pulse, confirming its inclusion in threat‑sharing feeds. Defensive products such as PhishDestroy, MetaMask, and SEAL have already blocked the domain.

While the offline status limits immediate exposure, the infrastructure—particularly the use of Cloudflare’s network and a generic registrar—suggests the operators are leveraging reputable services to mask their true location and to host a crypto‑related scam. Analysts should continue to monitor the domain for any re‑activation, enforce blocklist entries across DNS and web filtering solutions, and advise users targeting the "argent" brand to verify URLs against official channels. Further investigation of the IP address for any additional malicious payloads or associated domains is recommended to map the broader campaign footprint.