iwackfud[.]digital

This domain, iwackfud.digital, was created on 30 September 2025 via the PublicDomainRegistry.com registrar and is currently hosted behind Cloudflare (AS13335) with the IP address 172.67.209.24 located in the United States. The site presented the page title “TwisProfit” and did not serve an SSL certificate, indicating HTTP‑only access. DNS resolution points to Cloudflare nameservers abby.ns.cloudflare.com and keanu.ns.cloudflare.com. Automated analysis on VirusTotal recorded 16 detections out of 93 scanned engines, and Gridinsoft assigned a trust score of 0 / 100, reflecting a high likelihood of malicious intent.

The domain appears in a single OTX pulse and is listed on one public blocklist; PhishDestroy has already taken the site offline. Intelligence tags the site as a brand‑impersonation campaign targeting the brand “argent” and associates it with the publicly available Airdrop Scam phishing kit. The combination of a low‑trust score, multiple vendor detections, and the use of a known scam kit suggests the infrastructure was deliberately prepared for credential or asset harvesting.

What remains uncertain includes the exact content served before takedown, the presence of any command‑and‑control callbacks, and whether any victims have already submitted credentials. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated Cloudflare nameservers, and add the IP address 172.67.209.24 to deny‑list rules. Incident response teams should also search for any recent authentication attempts to “argent” accounts that may correlate with the timeframe of this domain’s activity, and consider notifying users of the brand about the impersonation attempt.