romaradarclub[.]it

As of July 22, 2026, the domain romaradarclub.it is flagged for social engineering activities and remains active. Infrastructure analysis reveals that the domain was created on October 21, 2012, and is registered through Aruba s.p.a. The domain resolves to the IP address 89.46.109.12, which is managed by nameservers dns.technorail.com, dns2.technorail.com, and dns3.arubadns.net.

While the exact nature of the threat is not yet fully analyzed, Google Safe Browsing has identified the domain as a social engineering threat, indicating that it may be used to deceive users into divulging sensitive information. PhishDestroy, a known security tool, blocks this domain, and it appears on one security blocklist, further corroborating its malicious intent. Defenders should exercise heightened vigilance and implement blocking measures to prevent access to this domain.

Given the high risk level, it is advisable to monitor for any related malicious activities and to educate users on the dangers of social engineering attacks. The domain's current status as active suggests ongoing threat operations, and regular updates from security vendors should be sought to stay informed about the latest threat landscape.