immediate-connect[.]cc

PhishDestroy first observed immediate-connect.cc on Feb 26, 2026. Stored content metadata identifies ["argent"] as the apparent target. The captured page title is “Immediate Connect”. Page analysis recorded additional brand references to Argent. Current evidence score: 85/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and DNS security resolvers. VirusTotal recorded 2 detections among 95 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Feb 23, 2026 at 07:04 UTC. DNS security checks returned 10 blocking results across 14 tested policies: Adguard Default, Adguard Family, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware, Mullvad Adblock, Opendns Standard, Quad9 Secure; no observation timestamp was retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 2, 2026 at 21:01 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 03:16 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:17 UTC; content was unavailable. Registration records for the domain list NameCheap, Inc. as the registrar and Feb 21, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (CLOUDFLARENET, US). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Jul 29, 2026 at 04:09 UTC returned 56/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists PhishDestroy / botadmin.destroy.tools as the certificate issuer with validity through Jan 6, 2036; checked Mar 15, 2026 at 08:11 UTC.

The content indicators and 2 positive source findings support the current ["argent"]-themed wallet-connection phishing classification. The target field identifies ["argent"], but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.