italoxflow-it[.]com

The domain italoxflow-it.com was registered on March 06, 2026 through NameCheap, Inc. and is currently reported as taken offline. The site presents the page title "Italoxflow | Investimento automatizzato con IA per investitori moderni," suggesting an investment‑focused lure. No TLS certificate is associated with the domain, indicating that HTTPS is not enforced. DNS resolution points to the Cloudflare network (nameservers nico.ns.cloudflare.com and zariyah.ns.cloudflare.com) and resolves to IP address 172.67.172.139, which is allocated to AS13335 Cloudflare, Inc. in the United States.

The domain appears on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that one out of ninety‑four security vendors flagged the domain, providing limited but notable detection evidence. The combined indicators—recent creation date, lack of SSL, presence on multiple blocklists, and a single vendor detection—suggest a moderate likelihood of malicious intent despite the limited vendor consensus.

Uncertainties remain regarding the exact payload or credential‑harvesting mechanisms, as no detailed page content or malware analysis is available. Defenders should continue to block the domain and its associated IP at perimeter defenses, monitor for any resurgence or related infrastructure, and consider adding the domain to internal threat intelligence feeds. Ongoing verification of the domain’s status and any future re‑activation should be performed, leveraging the known nameservers and IP as reference points for rapid detection.