eanhoinerawen[.]com

Analysis of eanhoinerawen.com, observed on July 24, 2026, indicates that the domain is being used for brand impersonation targeting the financial services brand argent. The site is currently offline, but historical evidence shows it was hosted behind Cloudflare's network (AS13335) with the resolved address 172.67.158.221, a United States‑based IP. No SSL certificate was presented for the domain, and the Gridinsoft trust score was recorded as 0 out of 100, suggesting a lack of credibility. The page title retrieved during earlier scans reads "Юридическая помощь при мошенничестве | Project Finance," which aligns with the fraudulent narrative of legal assistance against fraud, a common lure in impersonation campaigns.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis recorded a single positive detection out of ninety‑five scanning engines, confirming that at least one security vendor identified malicious activity associated with the domain. Registration details show the domain was provisioned through ARIN, though no further WHOIS metadata is provided.

Nameserver information is limited to a single entry, and no additional infrastructure details are available. Defenders should continue to block eanhoinerawen.com at perimeter controls, monitor for any resurgence of the domain or associated IP ranges, and update detection signatures to include the observed page title and lack of TLS. Given the low trust score, blocklist presence, and positive VirusTotal flag, the domain should be treated as malicious until proven otherwise.