antaresfinviora[.]com

On July 24 2026, the domain antaresfinviora.com was observed as an active brand‑impersonation campaign targeting the financial brand “argent”. The site’s HTML title reads “Antares Finviora – Plateforme officielle | Trading IA 2025 | Plus de 10 000 avis”, indicating a fraudulent trading service narrative. Registration data shows the domain was created on 21 February 2026 through Metaregistrar BV, and the authoritative nameservers are becky.ns.cloudflare.com and wesley.ns.cloudflare.com, both belonging to Cloudflare. DNS resolution points to IP 104.21.66.119, which is owned by AS13335 Cloudflare, Inc., and geolocated to the United States.

No TLS certificate was presented, meaning the site operated over HTTP only. Reputation checks reveal the domain appears on one security blocklist and is explicitly blocked by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 93 scanners, and Gridinsoft assigned a trust score of 0 / 100, reinforcing the malicious classification.

The site’s current HTTP status is offline, indicating the operators have taken it down, but the infrastructure remnants remain observable. Analysts should continue to block the domain at perimeter and endpoint controls, monitor the associated Cloudflare IP for any re‑use, and add the registrar and nameserver pairs to watchlists for future abuse. Additional investigation is warranted to determine whether the page title is being reused in other active domains and to confirm if any credential‑harvesting endpoints were ever reachable before takedown.