alverixanpro[.]net

Analysis indicates that alverixanpro.net, registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, is currently offline but exhibits multiple indicators of a high‑risk brand‑impersonation campaign targeting the brand “base.” The domain resolves to the Cloudflare address 104.21.30.82, associated with ASN 13335 in the United States, and uses the Cloudflare nameservers aarav.ns.cloudflare.com and lily.ns.cloudflare.com. No TLS certificate is present, leaving the site unencrypted and allowing easy interception of any traffic that might be restored. Google Safe Browsing has flagged the domain for social‑engineering content, and VirusTotal reports that 11 of 95 scanning engines classify the host as malicious, reinforcing the suspicion of fraudulent intent.

The page title observed in the initial fetch – “AlveriXanPro - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni” – contains language typical of investment‑oriented scams, yet no further content has been captured for verification. The domain appears on three public blocklists and is referenced in a single AlienVault OTX pulse, while commercial blocklists such as PhishDestroy, MetaMask, and SEAL have explicitly listed it as hostile. Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of reputation.

Because the site is offline, dynamic analysis of payloads, redirects, or credential‑harvesting forms is not possible, and the exact tactics employed remain unknown. Defenders should continue to block the domain at perimeter and DNS levels, monitor for re‑activation, and consider adding the IP address 104.21.30.82 to any existing Cloudflare‑derived threat‑intel feeds. Further investigation should focus on capturing a live snapshot of the site should it become active, correlating traffic with known “base” brand abuse patterns, and sharing any new artifacts with the wider security community.