walkta[.]digital

This domain represents a high-confidence cryptocurrency wallet impersonation threat specifically targeting users of the Argent wallet service. Analysis indicates the site was designed to deceive visitors into believing they were interacting with legitimate Argent infrastructure, likely to harvest wallet credentials, recovery phrases, or facilitate unauthorized transactions. The page title 'TwisProfit' suggests an attempt to present itself as a profit-related service, a common tactic in cryptocurrency scams to lure victims with promises of financial gain or exclusive offers. Infrastructure analysis reveals multiple high-risk indicators associated with walkta.digital. The domain was registered on September 18, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently observed in phishing campaigns. It resolves to the IP address 172.67.214.167, hosted on AS13335 (Cloudflare, Inc.), which is often leveraged to obscure the true origin of malicious content. Security vendors have flagged this domain in 18 out of 95 detection engines on VirusTotal, and it appears on three distinct security blocklists. Notably, the domain lacks an SSL certificate, further reducing its legitimacy and increasing the risk of credential interception. Users who visited walkta.digital should immediately assume their wallet credentials or recovery phrases may have been compromised. It is recommended to cease all interactions with the domain and any associated services. Affected individuals should transfer assets from any potentially exposed wallets to a new, secure wallet using a clean device. Additionally, monitoring for unauthorized transactions and enabling multi-factor authentication on all cryptocurrency-related accounts is strongly advised. If recovery phrases were entered, consider the original wallet permanently compromised and avoid reusing it.