ibleaputi[.]digital
“Helvionex - ICO & Crypto”
The domain ibleaputi.digital hosted a fraudulent website titled "Helvionex - ICO & Crypto" that impersonated the brand argent. The site posed as a cryptocurrency initial coin offering platform, presenting a threat as a social engineering scam designed to deceive users into interacting with a fake brand to potentially steal funds or credentials.
Technical analysis reveals the site is a confirmed impersonation scam. VirusTotal shows 19 out of 95 detection engines flagged the domain as malicious. Google Safe Browsing flagged the site for SOCIAL_ENGINEERING. The domain is on 3 blocklists and flagged by ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, and CRDF. The IP address is 172.67.133.39, hosted in the US by AS13335 Cloudflare, Inc. The domain was created on 2026-01-21 via registrar PDR Ltd. d/b/a PublicDomainRegistry.com. The site has no SSL certificate and its nameservers are ns1.suspended-domain.com and ns2.suspended-domain.com.
As of the report, the site is DOWN/OFFLINE. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10 out of 10, indicating a critical risk. The site is no longer accessible but remains a high-risk indicator due to its fraudulent nature and multiple security flags.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
PD-20260127-88039D Recipient: abuse@publicdomainregistry.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive