antagonne[.]com

Analysis of antagonne.com indicates that the domain was used for generic phishing and is currently offline. The site’s HTTP response returned a page whose title was exactly "antagonne.com", providing no further contextual clues. The domain was registered on 21 August 2025 through Cloudflare, Inc., and the authoritative nameservers are karina.ns.cloudflare.com and lars.ns.cloudflare.com, both Cloudflare‑managed. DNS resolution points to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States.

No TLS certificate was observed, meaning the site was served over plain HTTP only. Reputation services show a Gridinsoft trust score of 0 out of 100, and the domain appears on a single security blocklist, where it is listed as blocked by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 95 scanned security vendors, confirming that at least one vendor identified malicious behavior associated with the domain.

The limited detection footprint and the absence of additional public reports suggest that the phishing campaign was short‑lived or targeted a narrow audience. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists, and monitor for any resurgence of the same IP address or Cloudflare‑hosted sub‑domains. Because the site is no longer reachable, active mitigation is limited to preventive controls; threat‑hunters should also query historical DNS and web archives for artifacts that may reveal the specific phishing lure or credential‑stealing endpoint that was previously hosted.