Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
ampleur-finthora[.]net
“Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”
Zusammenfassung der Beweislage
Analysis of the domain ampleur-finthora.net indicates it was actively engaged in brand impersonation targeting Argent, a financial or trading service, as of July 2026. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolved to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.), a provider commonly used to obscure the true origin of malicious sites. Nameservers edna.ns.cloudflare.com and jake.ns.cloudflare.com further confirm Cloudflare’s role in the domain’s hosting infrastructure.
Detection data from July 24, 2026, shows the domain was flagged by one of 95 security vendors on VirusTotal, though the specific vendor and detection rationale are not disclosed in available intelligence. The domain appears on at least one security blocklist, as reported by PhishDestroy, which classified it as a brand impersonation threat. The page title, 'Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis,' explicitly references a trading platform, aligning with the identified scam type of brand impersonation targeting Argent. No SSL certificate was detected, increasing the likelihood of insecure data transmission if the site had remained operational.
As of the report date, the domain has been taken offline, though defenders should treat any residual DNS records or cached content as potentially malicious. The combination of a low Gridinsoft trust score (0/100), Cloudflare-hosted infrastructure, and a registration pattern consistent with high-risk domains suggests this was part of a deliberate phishing campaign. Defenders are advised to block the domain at the DNS and proxy levels, monitor for related domains registered through the same registrar, and investigate any connections to the IP 188.114.97.3 for additional compromised assets.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260107-B0827E- Titel der erfassten Seite
- Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis
- PDF-Artefakt
- PDF-Beweis
Vollständiger Beweistext
Acceptable Use Policy (AUP): The domain ampleur-finthora.net is engaged in phishing activities, which directly contravenes your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The use of this domain for malicious purposes constitutes a violation of your TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Services by Electronic Means: This law prohibits the use of electronic services for fraudulent purposes, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 286 and 287 address fraud and computer-related offenses, making phishing a criminal act.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to regulatory scrutiny and potential legal liabilities under Polish law, including fines and sanctions. Prompt compliance is essential to mitigate these risks.
Data Coverage
Erkenntnisse zur Netzwerksicherheit
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | ampleur-finthora.net |
malicious | Sinkholed |
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 12.08.2026
Erkennungszeitleiste
-
Cloudflare Radar
Cloudflare-Radar-Scan gespeichert · Scan öffnen
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, TLS-Namen und Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal-Analyse
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt