kjs78[.]jkhij456[.]luhuijklma[.]yoga

The domain kjs78.jkhij456.luhuijklma.yoga is currently under investigation for brand impersonation, specifically targeting the cryptocurrency platform Argent. This domain is now offline, but its recent activity warranted a closer look due to its suspicious nature and potential to deceive users. The page title was found to be 'YD Mining', which does not directly reference Argent but may have been used to host a fraudulent mining-related scheme.

PhishDestroy's analysis reveals that the domain was registered through NameSilo, LLC on July 29, 2025, and resolves to IP address 45.204.215.149. It has not been flagged by any of the 95 VirusTotal vendors, indicating that it evaded initial detection. However, it appears on one security blocklist, suggesting some level of recognition by the security community. The domain lacks an SSL certificate, further reducing its legitimacy. Despite the low detection rate, the combination of brand impersonation targeting Argent and the recent creation date raises significant concerns.

Given that the domain is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that Argent users and security teams monitor for any related domains or resurgence of this threat. If encountered, users should avoid interaction and report the domain to relevant authorities. Blocking the IP address 45.204.215.149 and the domain name at the network level is advised to prevent any future access.