meekocu[.]digital

Analysis of meekocu.digital indicates a high‑risk brand‑impersonation campaign targeting the financial brand argent. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare address 188.114.96.3, located in the United States under ASN 13335. No TLS certificate is presented, meaning traffic is unencrypted. The authoritative nameservers are carlos.ns.cloudflare.com and ximena.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure.

The site’s HTML title is reported as “Helvionex,” which does not match the impersonated brand and suggests a placeholder or unrelated content. Google Safe Browsing classifies the domain as social‑engineering, and Gridinsoft assigns a trust score of 0 out of 100, indicating extreme suspicion. VirusTotal has recorded detections from 12 of 95 scanning engines, and the domain appears on three external blocklists. It is currently listed as blocked by PhishDestroy, MetaMask, and SEAL, and the hosting provider has taken the site offline.

Defenders should continue to block the domain at perimeter firewalls and DNS filters, monitor for any resurgence of the host IP, and add the domain to internal blacklists. Because the site is already offline, incident response can focus on preventing credential harvesting attempts that may have been directed to the domain while it was active. Continuous observation of the associated IP range and Cloudflare nameservers is recommended, as threat actors often reuse the same infrastructure for new impersonation campaigns.