artrarible[.]com

Analysis indicates that the domain artrarible.com was registered on August 13, 2025 through Gname.com Pte. Ltd. and resolves to the Cloudflare‑hosted address 104.21.93.166, an IP located in the United States and announced as AS13335 Cloudflare, Inc. The site presented a page title of “Rarible” and employed Vue.js, Cloudflare services, and HTTP/3, with an SSL certificate issued by Google Trust Services under the WE1 authority. The domain is associated with a tech‑support scam that masquerades as Apple, as indicated by the “Impersonates: Apple” tag. Defensive feeds have recorded the domain on a single security blocklist and it is listed as blocked by PhishDestroy. On VirusTotal the domain received a single positive detection out of ninety‑five scanned vendors.

The Cloudflare trust score from Gridinsoft is 28 out of 100, reflecting a low reputation. The domain’s current status is offline, suggesting that the malicious infrastructure has been taken down or is no longer active. While the available data confirms the presence of Apple impersonation and a tech‑support fraud narrative, the exact content of the landing page has not been captured; therefore visual or functional characteristics cannot be verified.

The limited detection footprint—only one blocklist entry and a solitary VirusTotal flag—means that broader exposure may be minimal, but the use of reputable hosting and a valid TLS certificate can aid evasion. Defenders should continue to block the IP 104.21.93.166 and the domain artrarible.com at DNS and proxy layers, monitor for re‑registration or similar Cloudflare‑based deployments, and incorporate the observed indicators (registrar Gname.com, nameservers denver.ns.cloudflare.com and pat.ns.cloudflare.com, and the Vue.js/HTTP3 stack) into threat‑intel feeds. Ongoing observation of related tech‑support scam campaigns targeting Apple users is recommended to detect any resurgence.