northflarefinthrix[.]com

Analysis of northflarefinthrix.com shows a domain created on 20 November 2025 and currently taken offline. The site presented the page title “Northflare Finthrix | Official Website Platform” and is classified as a social media phishing operation. No SSL certificate was observed, meaning traffic to the site would have been unencrypted. DNS resolution points to the IP address 185.107.44.123, which belongs to AS43350 NForce Entertainment B.V. in the Netherlands.

The domain is registered through MainReg INC. and uses Cloudflare nameservers athena.ns.cloudflare.com and rocco.ns.cloudflare.com. Reputation services indicate a Gridinsoft trust score of 0 / 100, and the domain is listed on a single security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that 19 of 95 scanning engines flagged the domain as malicious, confirming a consensus of suspicious behavior.

AlienVault OTX references the domain in one threat‑intelligence pulse, providing additional corroboration of its malicious use. The exact content of the site was not captured, so details such as login forms or brand impersonation beyond the generic “across” label remain unknown. Defenders should continue to block the domain at network perimeter devices, update URL filtering rules, and monitor for any re‑registration attempts. Given the lack of TLS, the low trust score, and multiple vendor detections, the domain should be treated as high‑risk for credential‑theft attempts targeting social‑media users.