ar[.]espace-intgrale[.]fr

The domain ar.espace-intgrale.fr was registered on February 25, 2026 through HOSTINGER operations, UAB and is presently taken offline. Infrastructure analysis shows the domain resolves to the IP address 172.67.147.83, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is served by the Cloudflare name servers tom.ns.cloudflare.com and zoe.ns.cloudflare.com, indicating the use of a third‑party CDN for traffic handling. No TLS certificate is associated with the host, suggesting the site is accessed via plain HTTP or that the certificate was removed when the site was taken down.

The page title observed during the brief live period was "Connexion - AR24", and the scam type is recorded as brand impersonation targeting Orange. VirusTotal scans returned 19 positive detections out of 93 security vendors, providing concrete evidence of malicious intent. The domain appears on a single security blocklist and has been flagged by the PhishDestroy mitigation service.

While the exact content of the landing page has not been captured, the combination of brand impersonation, a high vendor detection count, and the lack of TLS collectively indicate a credible phishing operation. Defenders should continue to block the domain at DNS and network layers, monitor the associated Cloudflare IP for any re‑activation, and ensure that endpoint protection solutions incorporate the 19 VirusTotal detections. Additional scrutiny of traffic to the Cloudflare edge nodes may reveal related campaigns, and any future registration attempts using similar naming patterns should be pre‑emptively denied.