delvonaonix[.]com

This domain, delvonaonix.com, is identified as a high-risk brand impersonation threat targeting users of the Argent cryptocurrency wallet. Analysis confirms the domain was actively used for phishing operations, presenting itself as an official platform under the guise of "KI-Trading 2026." The domain is currently offline, though prior activity indicates a deliberate attempt to deceive users into disclosing sensitive credentials or transferring digital assets. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu. It resolved to the IP address 172.67.141.26, hosted on Cloudflare’s network (AS13335), a common tactic to obscure malicious infrastructure. The domain lacks an SSL certificate, a red flag for user security. It appears on three security blocklists and is flagged by 18 of 95 security vendors on VirusTotal. Additional detection sources include PhishDestroy, MetaMask’s internal threat feeds, and the SEAL anti-phishing consortium. Google Safe Browsing also classified the domain as phishing, reinforcing its malicious classification. Current status indicates the domain has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure and registration details suggest potential for re-emergence under a similar guise. Organizations and individuals are advised to block the domain and its associated IP (172.67.141.26) at the network level. Users should verify all communications claiming to originate from Argent through official channels only. Security teams are recommended to monitor for newly registered domains with similar naming patterns or infrastructure ties to this campaign, particularly those leveraging Cloudflare hosting or Registrar.eu registrations.