fluxinvexus[.]com

Analysis of the domain fluxinvexus.com indicates it was actively impersonating Argent, a recognized brand, as part of a brand impersonation campaign. The domain was registered on February 21, 2026, through Name SRS AB and has since been taken offline. Infrastructure analysis reveals the domain resolved to the IP address 172.67.221.181, hosted on Cloudflare's network (AS13335) in the United States. Nameservers associated with the domain include melina.ns.cloudflare.com and norman.ns.cloudflare.com, consistent with Cloudflare's infrastructure.

The domain was flagged by at least one security blocklist, specifically PhishDestroy, and received a trust score of 0/100 from Gridinsoft, indicating a high-risk classification. At the time of assessment, two out of ninety-five security vendors on VirusTotal detected the domain as malicious. No SSL certificate was present, which is atypical for legitimate platforms and may have contributed to its detection. The page title, 'Flux Invexus - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis,' suggests an attempt to mimic an official trading platform, leveraging social proof tactics such as fabricated user reviews to deceive visitors.

While the domain is currently offline, defenders should remain vigilant for similar impersonation attempts targeting Argent or other financial platforms. Monitoring for domains registered through Name SRS AB or resolving to Cloudflare IPs associated with prior malicious activity may aid in early detection. Organizations are advised to update blocklists to include this domain and conduct retrospective log analysis to identify any prior interactions with the IP 172.67.221.181 or related infrastructure. Further investigation into the registration details and hosting patterns may reveal additional connected domains or campaigns.