fxgladiatori[.]com

Analysis of fxgladiatori.com shows a high‑risk brand‑impersonation campaign targeting the celer brand. The domain was registered on March 03, 2025 through GoDaddy.com, LLC and is hosted behind Cloudflare (AS13335) with the public address 162.159.135.42. The authoritative nameservers ns25.domaincontrol.com and ns26.domaincontrol.com resolve to the same Cloudflare edge network, indicating that the attacker is leveraging a widely trusted CDN to obscure the origin of the malicious content.

Detection services have raised multiple alarms: VirusTotal reports 11 of 95 security vendors flagging the site, Gridinsoft assigns a trust score of 1 out of 100, and Scamadviser mirrors this rating with 1 out of 100. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. An SSL certificate issued by Google Trust Services (WE1) is present, and the site returns HTTP 200 responses, which may aid in evading naïve filters that rely on status codes alone.

Technical fingerprinting reveals a standard WordPress stack running MySQL, PHP, and a collection of common plugins and libraries including Yoast SEO, Swiper, Slick, Kinsta, and jQuery Migrate. The page title "Home - FX Gladiatori" is the only visible content disclosed, and no additional page analysis is available. The site explicitly claims to impersonate the celer brand, confirming the intent to deceive users familiar with that brand.

Defenders should prioritize immediate containment by adding fxgladiatori.com to network and email filtering rules, and consider sinkholing the associated IP range if feasible. Continuous monitoring of new domains registered with the same registrant or nameserver configuration is advised, as the attacker may reuse this infrastructure for further campaigns. Organizations using the celer brand should alert users to the existence of this site, enforce multi‑factor authentication, and scrutinize any credential‑entry attempts that reference the domain.