mavitodex[.]com

Analysis of mavitodex.com indicates a brand impersonation phishing domain targeting users of the Argent platform. The domain, registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, is currently offline but was previously flagged by security vendors and blocklists. Infrastructure analysis reveals the domain resolved to IP 172.67.191.3, hosted on Cloudflare's network (AS13335) in the United States, with nameservers karina.ns.cloudflare.com and ricardo.ns.cloudflare.com. The absence of an SSL certificate further reduces legitimacy, as modern phishing sites typically employ encryption to evade detection.

Two of 93 security vendors on VirusTotal flagged the domain, and it appears on one security blocklist, specifically PhishDestroy. The page title, 'Mavlito Dex - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis,' explicitly references a purported official platform, leveraging social proof (e.g., '10,000 reviews') and AI trading terminology to enhance credibility. This aligns with the classified scam type of social media phishing, where attackers mimic trusted brands to harvest credentials or financial information. The domain's trust score from Gridinsoft is 0/100, reinforcing its high-risk classification.

While the site is currently offline, defenders should treat this domain as malicious and monitor for reactivation or related infrastructure. Organizations should update blocklists, alert users to the impersonation of Argent, and investigate any prior interactions with the domain for potential compromise. No additional evidence of active exploitation or associated malware is available at this time.