auth[.]fleuribnk[.]com

The domain auth.fleuribnk.com is a generic phishing site designed to deceive users into entering sensitive credentials. It does not impersonate a specific well-known brand but presents itself under the fabricated name 'FLEURI BANQUE' to appear legitimate. As of the latest verification, auth.fleuribnk.com has been taken offline, though it previously posed an elevated risk of credential theft or financial fraud through its login interface.

Technical analysis of auth.fleuribnk.com reveals limited detection, with only 1 of 95 VirusTotal security vendors flagging the domain. It was registered through Dynadot LLC on February 21, 2026, and resolved to the IP address 188.114.97.3, hosted by Cloudflare, Inc. The domain appeared on a single security blocklist, PhishDestroy, and used an SSL certificate issued by Cloudflare TLS Issuing ECC CA 3. Observed technologies included PHP, Bootstrap, jQuery, and Cloudflare services, while the page title displayed 'FLEURI BANQUE - Connexion' to mimic a banking portal.

Users who interacted with auth.fleuribnk.com should immediately change any credentials entered on the site, particularly if reused across other platforms. Enabling two-factor authentication (2FA) on all critical accounts is strongly recommended to mitigate further risk. Monitor financial statements and credit reports for unauthorized activity. To report the phishing domain, submit it to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial data was exposed, contact the relevant institution to secure accounts and consider placing a fraud alert with credit bureaus.