neocapital-fr[.]net

As of July 23, 2026, the domain neocapital-fr.net is confirmed to be involved in a brand impersonation scam targeting the brand Argent. The domain is currently offline, which may indicate that it has been taken down by the hosting provider or the registrar in response to security reports. Infrastructure analysis reveals that the domain resolves to the IP address 172.67.166.244, which is located in the United States and is associated with Cloudflare, Inc. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026. Despite the domain being offline, it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. This suggests that the domain was previously identified as a security threat.

The lack of an SSL certificate further indicates that the site did not provide secure connections, which is common for phishing operations. The page title 'about:privatebrowsing' is unusual and may have been used to avoid detection or to create confusion. The Gridinsoft trust score for this domain is 0/100, indicating a high level of distrust and potential risk. Security vendors have flagged this domain as a threat, with 15 out of 93 vendors reporting it as malicious on VirusTotal.

Defenders should be vigilant and ensure that this domain remains blocked in their security systems. Additionally, any associated IP addresses or nameservers should be monitored for further suspicious activity. The nameservers used are adele.ns.cloudflare.com and michael.ns.cloudflare.com, which are typical for Cloudflare-hosted domains. The domain's offline status should be confirmed, and regular checks should be performed to ensure it does not reappear with similar malicious intent.