selviorex-invest[.]net

Analysis of selviorex-invest.net conducted on July 24, 2026 shows the domain is currently offline but retains artifacts indicating an investment‑type phishing campaign. The site previously presented the title “Selviorex - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”, suggesting a fraudulent offering of AI‑driven trading services. Registration was performed through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21 2026. DNS resolution pointed to 172.67.169.198, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain employed Cloudflare’s infrastructure, as evidenced by the authoritative nameservers holly.ns.cloudflare.com and kolton.ns.cloudflare.com, and the presence of HSTS, Cloudflare Browser Insights, and HTTP/3.

The TLS certificate was issued by Google Trust Services under the “WE1” profile, confirming the use of a legitimate certificate chain. VirusTotal recorded 2 detections out of 93 scanned scanners, and the domain appears on a single external blocklist. Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious classification. PhishDestroy has also blocked the domain. No additional public reporting platforms such as OTX or Safe Browsing were referenced in the available intelligence.

Uncertainty remains regarding the exact content served before takedown, as no page capture is provided. The limited detection count may reflect a short exposure window rather than reduced risk. Defenders should continue to monitor the IP address 172.67.169.198 for any re‑use, enforce blocklist updates that include the domain and its nameservers, and consider Cloudflare‑associated indicators as part of broader threat‑intel feeds. Given the investment‑scam label, any communications purporting to originate from “Selviorex” or referencing AI‑based trading should be treated as malicious. Ongoing vigilance is recommended until the domain is definitively removed from active threat‑intel repositories.