axironai[.]tech

The domain axironai.tech was registered on 21 February 2026 through Sav.com, LLC and currently resolves to the Cloudflare‑owned address 172.67.151.161 (AS13335, United States). The site presents a TLS certificate issued by Google Trust Services under the WE1 identifier, indicating a valid HTTPS endpoint. An HTTP request returns a 301 redirect, suggesting the primary landing page is being forwarded elsewhere. The page title returned from the server reads “Axiron AI – Offizielle Plattform | KI‑Trading 2025 | Über 10.000 Bewertungen”, which references a brand‑agnostic product but the intelligence explicitly notes that the site impersonates the brand “argent”. The infrastructure is built on a typical front‑end stack that includes jsDelivr, the jQuery CDN, jQuery, cdnjs, IPinfo, and Cloudflare Browser Insights, and it negotiates HTTP/3 connections via Cloudflare’s edge network.

The domain is listed on a single security blocklist and has been blocked by the PhishDestroy service. Reputation scoring from Gridinsoft assigns a zero‑point trust rating (0/100). VirusTotal analysis shows that 11 of 95 scanned scanners flagged the domain as malicious, reinforcing the suspicion of malicious intent. Nameservers beau.ns.cloudflare.com and tara.ns.cloudflare.com confirm that the domain is fully delegated to Cloudflare’s DNS service.

While the page content has not been captured, the combination of a brand‑impersonation claim, a high‑visibility page title, a low trust score, and multiple vendor detections provides strong evidence that the site is being used for credential harvesting or fraud targeting users of the argent brand. The lack of additional blocklist listings does not mitigate the risk, as the active status and recent creation date indicate an ongoing campaign. Defenders should add axironai.