velorafonds[.]live

The domain velorafonds.live was registered on May 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active, returning HTTP 200 with the page title “Velorafonds | Official Platform for AI Assisted Trading”. The site presents a valid Let’s Encrypt certificate (E8) and resolves to the IP address 188.114.97.3, which is hosted by Cloudflare, Inc. in Canada. Three security scanners flagged the domain out of ninety‑five, and the trust score is zero out of one hundred, indicating a high likelihood of malicious intent.

Infrastructure analysis shows the domain uses Cloudflare’s DNS service with nameservers hal.ns.cloudflare.com and jocelyn.ns.cloudflare.com, providing rapid DNS resolution and built‑in DDoS mitigation. The IP address appears on a security blocklist and has been identified by a phishing mitigation service. The domain is also referenced in a threat‑intel pulse, confirming its association with phishing campaigns. The low trust score, combined with the presence on multiple threat feeds, suggests the site is being leveraged to harvest credentials from victims attracted by the promise of AI‑assisted trading.

Defenders should immediately add velorafonds.live to URL filtering and endpoint block lists, and enforce sink‑hole or null‑route for the resolved IP 188.114.97.3. Email security gateways must be tuned to detect references to “AI Assisted Trading” and the exact page title, as these strings have been observed in recent phishing lure content. Continuous monitoring of the domain’s DNS records and any future changes to its certificate or hosting provider is advised, as threat actors frequently pivot infrastructure while retaining the same brand façade.