strezof89yh9[.]carroll-230[.]workers[.]dev

This domain, strezof89yh9.carroll-230.workers.dev, is flagged for brand impersonation, specifically targeting the financial services brand argent. No known drainer kits have been identified in the analysis of this domain. The threat poses an elevated risk level due to its potential to deceive users and collect sensitive information.

Infrastructure analysis reveals that this domain has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain is registered through Cloudflare, Inc., and resolves to the IP address 104.21.15.6, located in the United States (AS13335 Cloudflare, Inc.). The domain was created on February 08, 2019, and currently has an SSL certificate issued by Google Trust Services / WE1. It appears on one security blocklist and is blocked by PhishDestroy.

The domain is currently offline, which suggests that it has been taken down or is no longer active. Despite this, the domain's presence on a blocklist and its history of being flagged by multiple security vendors indicate that it has been used for malicious purposes. Organizations and individuals should ensure that they update their security configurations to block this domain and remain vigilant against similar threats. The remaining risk is low while the domain remains offline, but monitoring for any reactivation is recommended.