semoxbit-app[.]org

Analysis of semoxbit-app.org confirms it operated as a brand-impersonation scam targeting Argent users. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to 104.21.55.160, a Cloudflare IP (AS13335) located in the US. Nameservers dax.ns.cloudflare.com and may.ns.cloudflare.com further tie the infrastructure to Cloudflare proxy services. No SSL certificate was present, increasing exposure to plaintext credential interception.

The page title, 'Semoxbit App - Oficiální platforma | AI-Trading 2025 | Více než 10 000 hodnocení,' explicitly positions the site as an official AI-trading platform with fabricated user endorsements. While the exact content of the site remains unanalysed, the title and scam classification indicate a focus on fraudulent investment schemes, likely leveraging the Argent brand to deceive victims. Two of ninety-three security vendors on VirusTotal flagged the domain prior to takedown, and it appeared on one security blocklist, corroborating its malicious status. Gridinsoft assigned a trust score of 0/100, reflecting high confidence in its fraudulent nature.

Infrastructure analysis reveals reliance on Cloudflare to obscure hosting origins, a common tactic in phishing campaigns. The domain was blocked by PhishDestroy and is now offline, though defenders should monitor for re-registration or related domains using similar naming conventions (e.g., 'semoxbit,' 'ai-trading'). No evidence links this domain to legitimate Argent services. Organizations should update blocklists to include semoxbit-app.org and its associated IP, and alert users to the impersonation risk targeting crypto-trading platforms.