dicalonix[.]co[.]com

The domain dicalonix.co.com is a generic phishing site that posed as a cryptocurrency hardware wallet service under the name 'Dicalonix - Secure Hardware Wallet for DeFi.' It was designed to deceive users into providing sensitive information or credentials related to cryptocurrency wallets, though no specific drainer kit was identified. The site has been taken offline, meaning it is no longer accessible, but users who interacted with it may still be at risk.

Technical indicators for dicalonix.co.com include a low detection rate of 1 of 95 VirusTotal vendors, with Gridinsoft being the only flagging vendor. Google Safe Browsing did not flag the domain. It appears on 1 security blocklist, specifically PhishDestroy. The domain was registered through Moniker Online Services LLC on February 21, 2026, and resolves to IP address 146.103.96.63, located in the Netherlands under AS216071 SERVERS TECH FZCO. The nameservers are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com. No SSL certificate was issued for the site.

Users who visited dicalonix.co.com or entered any information should take immediate safety steps. Since this is a generic phishing site targeting cryptocurrency users, change any passwords used on the site and enable two-factor authentication on related accounts. Monitor for unauthorized transactions and report the phishing attempt to relevant authorities or security platforms. If credentials were entered, watch for fraud and consider contacting your financial institution.