ezopax-bitapp[.]com

Analysis of ezopax-bitapp.com shows a newly registered domain (created 21 Feb 2026) that is currently offline but was previously resolving to the Cloudflare address 104.21.41.17, hosted in the United States under AS13335. The domain is delegated to Cloudflare nameservers josh.ns.cloudflare.com and ursula.ns.cloudflare.com, yet it lacked an SSL certificate, indicating that any web service would have been delivered over plain HTTP. The page title recorded during the brief live period – "Ezopax Bit App - Plataforma Oficial | Trading IA 2025 | Más de 10.000 Reseñas" – combined with the explicit label "Impersonates: argent" reveals a classic brand‑impersonation tactic aimed at users of the Argent platform, likely promising a trading or investment service. Reputation metrics are extremely poor: Scamadviser assigns a trust score of 1 / 100, Gridinsoft 0 / 100, and one of ninety‑three VirusTotal scanners flagged the domain as malicious.

The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. Registration was performed through Name SRS AB, a registrar often associated with disposable or low‑trust registrations. While the offline status limits immediate threat exposure, the infrastructure footprint suggests a low‑cost, fast‑deployment phishing operation that can be re‑activated by the threat actor at any time.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as no malware or page content has been captured. Defenders should proactively block the domain and its resolving IP, monitor Cloudflare edge traffic for similar patterns, and add the domain to internal URL filtering lists. Continuous observation of the registrar Name SRS AB and associated nameservers is advised, as they may host additional impersonation sites targeting the Argent brand.