immediatecipro-ai[.]com

The domain immediatecipro-ai.com was registered on February 21 2026 through Name SRS AB. It resolves to the Cloudflare‑owned address 188.114.96.3, which belongs to ASN 13335 and is geolocated in the United States. The authoritative nameservers are leland.ns.cloudflare.com and olivia.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The site presented the page title “Immediate Cipro AI – Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni”, suggesting a fraudulent offering related to AI‑driven trading. No SSL certificate was observed, indicating the site was served over plain HTTP.

Threat intelligence sources flag the domain as malicious. AlienVault OTX includes it in one pulse, and Gridinsoft assigns a trust score of 0 / 100. VirusTotal records four positive detections out of ninety‑five scanners. The domain is listed on two public blocklists and is actively blocked by PhishDestroy and Enkrypt. Current network checks show the domain is offline at the time of analysis (July 24 2026), preventing further content retrieval.

Because the site is hosted on a shared Cloudflare IP, investigators should monitor other domains that resolve to the same address for possible reuse. Defenders should add immediatecipro-ai.com to DNS‑based deny lists, enforce TLS inspection policies to block clear‑text HTTP connections, and correlate any internal traffic to 188.114.96.3 with user‑agent or URL patterns matching the observed page title. Continuous monitoring of the associated Cloudflare IP and the two nameservers is advised, as threat actors frequently repurpose such infrastructure for new campaigns. Indicators of compromise include the domain name, the IP 188.114.96.3, the two Cloudflare nameservers, and the four VirusTotal positive detections.