ampleur-finthora[.]net

Analysis of the domain ampleur-finthora.net indicates it was actively engaged in brand impersonation targeting Argent, a financial or trading service, as of July 2026. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the domain resolved to the IP address 188.114.97.3, hosted under AS13335 (Cloudflare, Inc.), a provider commonly used to obscure the true origin of malicious sites. Nameservers edna.ns.cloudflare.com and jake.ns.cloudflare.com further confirm Cloudflare’s role in the domain’s hosting infrastructure.

Detection data from July 24, 2026, shows the domain was flagged by one of 95 security vendors on VirusTotal, though the specific vendor and detection rationale are not disclosed in available intelligence. The domain appears on at least one security blocklist, as reported by PhishDestroy, which classified it as a brand impersonation threat. The page title, 'Ampleur Finthora - Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis,' explicitly references a trading platform, aligning with the identified scam type of brand impersonation targeting Argent. No SSL certificate was detected, increasing the likelihood of insecure data transmission if the site had remained operational.

As of the report date, the domain has been taken offline, though defenders should treat any residual DNS records or cached content as potentially malicious. The combination of a low Gridinsoft trust score (0/100), Cloudflare-hosted infrastructure, and a registration pattern consistent with high-risk domains suggests this was part of a deliberate phishing campaign. Defenders are advised to block the domain at the DNS and proxy levels, monitor for related domains registered through the same registrar, and investigate any connections to the IP 188.114.97.3 for additional compromised assets.