afrique-investment[.]com

Analysis of afrique-investment.com confirms its classification as a crypto investment scam, with infrastructure and detection data supporting an elevated risk assessment. The domain was registered on March 12, 2026, through HOSTINGER operations, UAB, and resolved to the IP address 92.113.23.185, hosted on AS47583 (Hostinger International Limited) in Germany. Nameservers ns1.dns-parking.com and ns2.dns-parking.com were configured, a common pattern observed in low-cost or disposable phishing infrastructure. The site was taken offline by July 25, 2026, though its prior operational status aligns with active fraud campaigns. Detection data from security vendors indicates moderate but consistent flagging: four of 94 engines on VirusTotal identified the domain as malicious, while three independent security blocklists listed it.

MetaMask, PhishDestroy, and SEAL have explicitly blocked this domain, reinforcing its association with fraudulent crypto-related activity. The page title, 'Accueil - Afrique Investment - Plateforme Crypto,' explicitly describes a cryptocurrency investment platform, correlating with the 'investment scam' classification provided in threat intelligence sources. Technical indicators include the use of PHP, Hostinger CDN, and HTTP/3, with no SSL certificate detected, a red flag for user security. The absence of HTTPS further increases the risk of credential interception or financial data exposure. While the exact content and operational mechanics of the scam remain unconfirmed due to the site's offline status, the available evidence—including registrar, hosting provider, detection history, and page metadata—strongly supports its role in fraudulent investment schemes targeting French-speaking users.

Defenders should treat this domain as confirmed malicious infrastructure. Blocking at the DNS or network level is recommended, particularly for organizations with exposure to cryptocurrency or financial services.