soryne-valtrix[.]com

The domain soryne-valtrix.com was registered on 21 February 2026 through Name SRS AB and points to the Cloudflare address 104.21.53.91, which belongs to ASN 13335 (Cloudflare, Inc.) in the United States. The zone is served by the Cloudflare authoritative name servers melissa.ns.cloudflare.com and sterling.ns.cloudflare.com. No TLS certificate was observed, indicating that the site does not provide HTTPS encryption. The page title returned by the HTTP response is “Soryne Valtrix - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”, which references a trading platform and suggests a claim of 10 000 user reviews.

The domain is listed as impersonating the brand “argent” and is classified as a social‑media phishing campaign. VirusTotal reports that two of ninety‑five scanning engines flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high likelihood of malicious activity. AlienVault OTX references the domain in a single threat‑intelligence pulse, and the domain appears on one public blocklist, where it is actively blocked by PhishDestroy. The combined evidence indicates that the infrastructure is deliberately hosted on a reputable CDN to hide the true origin while presenting a fraudulent trading service aimed at the “argent” brand.

Because the site is currently offline, real‑time content cannot be inspected, and the lack of an SSL certificate prevents verification of any potential credential‑capture forms. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the two Cloudflare name servers, and consider adding the IP address 104.21.53.91 to threat‑intel feeds. Additional analysis should be performed if the site becomes reachable again, focusing on HTTP payloads, credential‑phishing pages, and any redirects that may target social‑media accounts. Until further evidence emerges, the domain should be treated as a high‑risk impersonation vector.