clartevaultrex[.]com

Analysis of clartevaultrex.com shows a newly registered domain (creation date 21 February 2026) that is actively used for a brand‑impersonation investment scam targeting the Argent brand. The site resolves to IP address 172.67.167.27, which is owned by Cloudflare, Inc. (ASN 13335) and geolocated to the United States. The domain is served through Cloudflare’s authoritative nameservers carrera.ns.cloudflare.com and craig.ns.cloudflare.com, indicating the use of a third‑party CDN to hide the origin infrastructure. No TLS certificate is presented, meaning the site is delivered over plain HTTP, a characteristic often observed in low‑cost fraudulent deployments.

The page title returned from the live endpoint—"Clarté Vaultrex - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis"—promises an official trading platform powered by artificial intelligence and references a large number of reviews, a typical lure for investment‑related fraud. The registrar listed for the domain is Gransy, s.r.o., a company frequently associated with disposable or rapidly cycled registrations. Reputation services assign the domain extremely low trust scores (Scamadviser 1/100, Gridinsoft 0/100) and it appears on at least one security blocklist. VirusTotal scans have flagged the domain by five of ninety‑three antivirus engines, reinforcing the malicious assessment.

The domain is currently taken offline, but historical evidence and the blocklist entry by PhishDestroy confirm that it has been used for malicious activity. Defenders should add clartevaultrex.com and its resolving IP 172.67.167.27 to network‑level deny lists, monitor for any resurrection of the site, and employ URL filtering to block user access. Given the elevated risk rating, security teams should also alert users about the impersonation of the Argent brand and the investment‑scam narrative, and consider updating intrusion‑detection signatures to capture any traffic toward the domain or associated Cloudflare edge nodes.