ws[.]aadai[.]icu

This domain, ws.aadai.icu, poses as a legitimate Argent wallet interface to deceive users into entering sensitive credentials or cryptocurrency wallet details. Brand impersonation sites like this are designed to harvest login information or trick victims into authorizing malicious transactions, often leading to unauthorized access or asset theft. The site uses a WhatsApp page title as misdirection, a common tactic to appear benign while concealing its fraudulent purpose.

Analysis indicates the domain was registered on March 14, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with newly created phishing infrastructure. It currently resolves to 148.66.153.222, hosted on GoDaddy.com, LLC servers in Singapore. The domain lacks an SSL certificate, a red flag for secure connections. VirusTotal reports 17 out of 95 security vendors flagging ws.aadai.icu as malicious, and it appears on one security blocklist, further confirming its elevated risk status. The domain has since been taken offline, but similar threats may persist under different names.

If you visited ws.aadai.icu or entered any information, immediately disconnect the device from the internet to prevent further data transmission. Revoke any active wallet sessions or connected applications through the legitimate Argent platform. Monitor accounts for unauthorized transactions and consider migrating assets to a new wallet if compromise is suspected. Update all passwords and enable multi-factor authentication where available. Report the incident to the targeted brand’s official security team for further guidance and potential mitigation steps.