dorianixfloxin[.]com

The domain dorianixfloxin.com is identified as a high-risk phishing site specializing in brand impersonation, specifically targeting users of the Argent cryptocurrency wallet. Analysis confirms the domain is currently offline but previously hosted content designed to deceive visitors into disclosing wallet credentials or transferring funds under false pretenses. The page title, 'Dorianix Floxin – L’IA qui fait travailler votre argent à votre place,' directly references Argent’s branding and value proposition, increasing the likelihood of successful social engineering attacks against French-speaking users. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NameCheap, Inc., and resolves to the IP address 188.114.96.3, associated with Cloudflare’s network (AS13335). Security telemetry indicates the domain appears on three distinct blocklists, while VirusTotal reports 18 of 95 security vendors flagging it as malicious. Google Safe Browsing categorizes the domain as phishing, and it is actively blocked by multiple security mechanisms, including PhishDestroy, MetaMask, and SEAL. Notably, the domain lacks an SSL certificate, a common red flag for fraudulent sites. Current status indicates dorianixfloxin.com has been taken offline, likely due to enforcement actions or infrastructure takedowns. However, the domain’s registration remains active, posing a residual risk of re-emergence. Organizations and individuals are advised to block the domain and its associated IP (188.114.96.3) at the network level. Users who interacted with the domain should immediately revoke any connected wallet permissions, reset credentials, and monitor accounts for unauthorized transactions. Security teams should treat this domain as a confirmed threat vector for credential harvesting and financial fraud, prioritizing detection rules for similar impersonation patterns targeting cryptocurrency services.