zahlentix[.]com

Analysis of the domain zahlentix.com indicates it was actively engaged in brand impersonation phishing targeting the financial platform argent. The domain, registered on November 19, 2025, through NameCheap, Inc., resolved to the IP address 172.67.189.44, hosted under AS13335 (Cloudflare, Inc.) in the United States. No SSL certificate was detected, increasing the risk of unencrypted data transmission. The page title, 'Zahlentix – Tägliche Einnahmen mit sicherem KI-Handel erzielen,' suggests a fraudulent investment or trading scheme, aligning with the classified scam type of social media phishing.

Infrastructure analysis reveals the domain was flagged by one security blocklist (PhishDestroy) and was taken offline by the time of this report. VirusTotal data shows 2 of 95 security vendors marked the domain as malicious, though this does not represent a comprehensive assessment. Nameservers desi.ns.cloudflare.com and dom.ns.cloudflare.com were in use, consistent with Cloudflare’s proxy services, which may have obscured further hosting details. Defenders should treat this domain as a confirmed phishing threat.

While the site is currently offline, historical DNS and WHOIS records should be reviewed for potential connections to other malicious infrastructure. Given the absence of SSL and the use of Cloudflare, network-level blocking of the resolved IP (172.67.189.44) is recommended for proactive mitigation. No additional brand-specific artifacts or phishing kits were identified in the available data, limiting further attribution.