Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
ampleur-finthora[.]net
“Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”
Résumé des preuves
Analysis of the domain ampleur-finthora.net indicates it was actively engaged in brand impersonation targeting Argent, a financial or trading service, as of July 2026. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolved to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.), a provider commonly used to obscure the true origin of malicious sites. Nameservers edna.ns.cloudflare.com and jake.ns.cloudflare.com further confirm Cloudflare’s role in the domain’s hosting infrastructure.
Detection data from July 24, 2026, shows the domain was flagged by one of 95 security vendors on VirusTotal, though the specific vendor and detection rationale are not disclosed in available intelligence. The domain appears on at least one security blocklist, as reported by PhishDestroy, which classified it as a brand impersonation threat. The page title, 'Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis,' explicitly references a trading platform, aligning with the identified scam type of brand impersonation targeting Argent. No SSL certificate was detected, increasing the likelihood of insecure data transmission if the site had remained operational.
As of the report date, the domain has been taken offline, though defenders should treat any residual DNS records or cached content as potentially malicious. The combination of a low Gridinsoft trust score (0/100), Cloudflare-hosted infrastructure, and a registration pattern consistent with high-risk domains suggests this was part of a deliberate phishing campaign. Defenders are advised to block the domain at the DNS and proxy levels, monitor for related domains registered through the same registrar, and investigate any connections to the IP 188.114.97.3 for additional compromised assets.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260107-B0827E- Titre de la page capturée
- Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis
- Artefact PDF
- Preuve PDF
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain ampleur-finthora.net is engaged in phishing activities, which directly contravenes your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The use of this domain for malicious purposes constitutes a violation of your TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (PL):
Act of 18 July 2002 on the Provision of Services by Electronic Means: This law prohibits the use of electronic services for fraudulent purposes, including phishing.
Criminal Code of Poland (Ustawa z dnia 6 czerwca 1997 r. - Kodeks karny): Articles 286 and 287 address fraud and computer-related offenses, making phishing a criminal act.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to regulatory scrutiny and potential legal liabilities under Polish law, including fines and sanctions. Prompt compliance is essential to mitigate these risks.
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | ampleur-finthora.net |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif