monvex-es[.]com

Analysis of monvex-es.com indicates a brand‑impersonation campaign targeting the Argent brand. The domain was registered on February 21, 2026 through Name SRS AB and is hosted on Cloudflare infrastructure (ASN 13335, United States). It resolves to IP address 172.67.195.230 and uses Cloudflare nameservers josh.ns.cloudflare.com and ursula.ns.cloudflare.com. No SSL certificate is present, and the site currently returns an offline HTTP status, suggesting the payload may have been taken down or is temporarily unavailable.

The page title observed during the brief live capture reads "Monvex - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas," which aligns with a financial‑services theme but does not reference Argent directly; the impersonation claim is derived from the designated brand target field. Gridinsoft assigns a trust score of 0 / 100, reflecting an extremely low reputation. The domain appears on a single security blocklist, PhishDestroy, and is referenced in one AlienVault OTX pulse, providing additional corroboration of malicious intent. VirusTotal analysis shows one of ninety‑three scanners flagged the domain, reinforcing the suspicion despite the limited detection count.

Defenders should add monvex-es.com to network and email filtering rules, enforce DNS sink‑hole or blocklist enforcement, and monitor for any re‑hosting attempts on the same IP or Cloudflare range. Given the lack of SSL and the offline status, automated crawling may be limited, but threat‑intel feeds should be updated to include the registrar, nameserver, and IP details to improve future detection. Continuous review of Cloudflare‑originated domains for similar brand‑impersonation patterns is recommended, as the infrastructure can be reused for new campaigns.