ravento[.]top

Analysis of ravento.top confirms its classification as an investment scam domain, currently offline as of July 22, 2026. The domain was registered on August 12, 2025, through Gname.com Pte. Ltd. and resolves to 104.21.91.24, hosted on Cloudflare's infrastructure (AS13335). No SSL certificate is present, increasing the risk of unencrypted data interception. Nameservers aria.ns.cloudflare.com and arturo.ns.cloudflare.com further link the domain to Cloudflare's network.

Detection data is limited but indicative: one of 95 security vendors on VirusTotal flagged the domain, while PhishDestroy has explicitly blocked it. The domain appears on one security blocklist and is referenced in two AlienVault OTX threat intelligence pulses, suggesting prior malicious activity. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk status. The scam type is explicitly categorized as an investment scam, though specific targeting details (e.g., impersonated brands or platforms) are not available in the current intelligence.

Defenders should treat this domain as confirmed malicious. Recommended actions include blocking DNS resolution to 104.21.91.24, monitoring for related subdomains or newly registered lookalike domains under the same registrar, and reviewing logs for connections to the IP or nameservers. Given the domain's offline status, further analysis of its content is not possible at this time. If the domain reactivates, additional scrutiny of its hosting infrastructure and associated certificates is advised.