The domain infolabwise.digital hosted a fraudulent site titled 'Helvionex,' which impersonated the brand 'argent' in a scam classified as impersonation. This site posed a threat by attempting to deceive users into believing it was associated with the legitimate brand, potentially leading to credential theft or financial fraud.
Technical analysis reveals the site was flagged by 20 of 95 VirusTotal vendors, with Google Safe Browsing marking it as FLAGGED for SOCIAL_ENGINEERING. It was detected by ADMINUSLabs, alphaMountain.ai, BitDefender, Cluster25, and CRDF. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com, with IP address 104.21.20.179 in the United States, hosted on AS13335 Cloudflare, Inc. It was created on 2026-02-21, has no SSL certificate, and nameservers are dax.ns.cloudflare.com and kira.ns.cloudflare.com.
The site is currently DOWN/OFFLINE. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 10, indicating a high risk. The presence on 3 blocklists further confirms its malicious nature.
スキャナーに関する注記:unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='infolabwise.digital', port=80): Max retries exceeded with url: / (Caused by NewConnectionE
DOM Analysisanalyzed 2026年4月23日score 88/1004 brand signals
Submitted URLhttp://infolabwise.digital/
ケース ID
ICANN OVERSIGHT
認定と RAA の背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Primary outcomeDNS 非アクティブreason: DNS NXDOMAIN80% confidence
Attributionsource: Dns Cache
Evidence layersAvailability: DNS inactiveContent: UnreachableDNS: NXDOMAINRegistration: Unknown
Latest HTTP observation不明Probe Inconclusive20%2026-10-11 01:08:51 UTC
RDAP registration不明
Observed timelinelast reachable: 2026-05-23 23:29:55 UTCcurrent episode first observed: 2026-09-30 16:14:55 UTCobserved RIP window: 2026-05-23 23:29:55 UTC → 2026-09-30 16:14:55 UTC · 3,112.75hmidpoint estimate ≈ 2026-07-27 19:52:25 UTC · precision very low · basis bounded
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups+
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels+
Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
Send the report. Keep outgoing report records and recipient information when available.
Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
(IN)
