lixendorfix[.]com

The domain lixendorfix.com was registered on February 21, 2026 through the registrar Gransy, s.r.o. and is currently listed as offline. DNS resolution points to the IP address 172.67.172.148, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative name servers are paul.ns.cloudflare.com and romina.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. No TLS certificate is associated with the host, indicating that HTTPS was not provisioned at the time of observation.

The site’s HTML title reads “Lixendorfix - Offizielle Plattform | KI-Trading 2025 | Über 10.000 Bewertungen,” suggesting a false claim of an official AI‑trading platform and attempting to leverage the reputation of the brand argent, which is explicitly listed as the impersonated target. Google Safe Browsing classifies the domain as a social engineering threat, and PhishDestroy has added it to its blocklist, representing the sole known security blocklist entry. VirusTotal scans show that nine out of ninety‑three security vendors flagged the domain, and AlienVault OTX references the domain in a single threat‑intelligence pulse. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

The overall risk rating is elevated. While the infrastructure details and detection footprints are clear, the exact content served before the takedown has not been captured, leaving the specific phishing page layout and credential‑harvesting mechanisms unverified. Defenders should block the domain and its underlying IP at network perimeters, monitor for any residual traffic to the Cloudflare IP range, and update email and social‑media security policies to flag communications purporting to originate from argent. Continuous re‑evaluation is advised in case the operator re‑hosts the campaign on alternate infrastructure.