anna-maria-coach[.]com

The domain anna-maria-coach.com is currently flagged as an active fake wellness phishing site. Analysis indicates the page impersonates legitimate aromatherapy or coaching services, using deceptive content titled '5 СОСТОЯНИЙ, которые можно изменить с помощью эфирных масел (специалистам)' to lure victims into engaging with fraudulent offers. No direct brand impersonation of a specific entity is observed, but the content mimics professional wellness coaching platforms to establish credibility. Technical indicators reveal the domain was registered through REGISTER S.P.A. on March 18, 2022, and resolves to the IP address 185.215.4.22, hosted under AS57724 (DDOS-GUARD LTD) in Russia. VirusTotal detection metrics report 2 of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R13), a common tactic among phishing operators to feign legitimacy. Infrastructure analysis further notes the use of a bulletproof hosting provider, a frequent choice for threat actors to evade takedowns. The domain remains active as of this report, posing a high risk to users who may be deceived into providing personal information or making fraudulent payments. Immediate mitigation steps include blocking the domain and IP at the network level, reporting the site to additional security vendors for broader detection, and educating users on recognizing phishing tactics in wellness or coaching-themed scams. Organizations should monitor for related domains registered under the same registrar or IP range, as threat actors often reuse infrastructure across campaigns.