aatxpro[.]com

The domain aatxpro.com was registered on November 22, 2025 through Gname.com Pte. Ltd. and is currently listed as offline. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., placing the hosting location in the United States. DNS is served by the Cloudflare name servers nash.ns.cloudflare.com and rosalie.ns.cloudflare.com, confirming the use of Cloudflare’s CDN and security services. The site presented a page title of "MetaTrader 5 Trading Platform for Forex, Stocks, Futures," suggesting an attempt to lure victims interested in financial trading platforms. The SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS configuration despite the malicious intent.

Threat intelligence flags the domain as a brand impersonation campaign targeting the brand "signal." Two of ninety‑five VirusTotal scanners flagged the site, providing limited but corroborating evidence of malicious content. Independent blocklists, including PhishDestroy and ScamSniffer, have added aatxpro.com to their watchlists, and the domain appears on two additional security blocklists. Reputation services assign very low trust scores: Gridinsoft rates the domain at 26 / 100 and Scamadviser at 11 / 100, both reflecting a high likelihood of abuse.

Detected technologies on the site include Tailwind CSS, Vue.js, Unpkg, and HTTP Strict Transport Security (HSTS), all delivered through Cloudflare. These components are commonly employed in legitimate sites as well as in fraudulent pages to improve appearance and enforce secure connections. No further forensic artifacts such as specific malicious payloads or credential‑stealing scripts have been disclosed.

Given the confirmed brand impersonation, the association with a reputable financial trading platform in the page title, and the presence on multiple blocklists, security teams should continue to block aatxpro.