top[.]artiagri[.]com

Analysis of top.artiagri.com shows a classic brand‑impersonation infrastructure targeting Facebook users while presenting a misleading page title of "Netflix." The domain is registered through IONOS SE and was created on March 04, 2019. Authoritative name servers are ns1043.ui-dns.de, ns1086.ui-dns.org, ns1090.ui-dns.com, and ns1115.ui-dns.biz, and DNS resolution points to the single IPv4 address 103.153.182.184, which belongs to AS140947 SnTHostings located in the United States. No SSL certificate is present, indicating the site served only over HTTP. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist.

Detection engines on VirusTotal flagged the domain by 15 of 95 vendors, confirming malicious intent. The site was previously blocked by PhishDestroy and is now listed as offline. Observed indicators suggest a coordinated attempt to lure Facebook credentials or users under the guise of Netflix content.

Defenders should add the domain and its resolving IP to network‑level deny lists, monitor for any resurgence of the host, and ensure that web filters block HTTP traffic to the IP. Continued scrutiny of the associated name servers is advised, as they host multiple malicious payloads in other campaigns. Organizations should educate users about the mismatch between the domain name and the displayed "Netflix" title, reinforcing that only legitimate Facebook URLs should be trusted.