prouessefinthra[.]com

This domain, prouessefinthra.com, was registered on February 21, 2026 through Name SRS AB and immediately pointed to the Cloudflare‑owned address 172.67.149.123 (AS13335, United States). No TLS certificate is presented, indicating the site was served over plain HTTP before being taken offline. The page title returned during the brief online period reads “Prouesse Finthra - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”, and the content was classified as a brand‑impersonation campaign targeting the financial brand argent. VirusTotal records show that 2 of 95 scanning engines flagged the domain as malicious, and AlienVault OTX referenced it in a single threat‑intel pulse.

The domain appears on one public blocklist and is actively blocked by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. Nameservers arya.ns.cloudflare.com and ernest.ns.cloudflare.com confirm the use of Cloudflare’s DNS infrastructure. Current status is offline, which limits further content analysis; no SSL certificate or additional HTTP headers are available for deeper inspection.

Defenders should continue to block the domain at perimeter and endpoint layers, add the IP address 172.67.149.123 to reputation feeds, and monitor for new domains registered with the same registrar or similar naming patterns. Ongoing observation of Cloudflare‑hosted infrastructure is advised, as the attacker may shift to new hostnames using the same IP range. Because the site explicitly impersonates argent, any communications referencing that brand should be scrutinized for unauthorized redirects or credential‑harvesting attempts.