rosacadgroup[.]com

Analysis of the domain rosacadgroup.com indicates active brand impersonation targeting Celer, classified as a high-risk threat. The domain was registered on December 1, 2025, through NameCheap, Inc., and currently resolves to the IP address 185.199.220.72, hosted under AS12488 (Krystal Hosting Ltd) in the United Kingdom. Infrastructure analysis reveals the use of Cloudflare nameservers (bjorn.ns.cloudflare.com and isabel.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). Detected technologies include Bootstrap, LiteSpeed, scrollreveal, OWL Carousel, jQuery, Google Analytics, Calendly, and HTTP/3, suggesting a structured web presence designed for prolonged engagement. The domain is flagged by two security blocklists, including PhishDestroy and ScamSniffer, and holds a Gridinsoft trust score of 0/100, reinforcing its malicious classification. While the page title, 'Sales Training London | Results Oriented Sales Academy,' does not directly reference Celer, the provided intelligence explicitly identifies the domain as a brand impersonation attempt targeting Celer. The HTTP status code 302 further suggests potential redirection or dynamic content delivery, though the exact payload remains unconfirmed. Defenders should prioritize blocking or monitoring this domain, particularly in environments where Celer-related communications are expected. The combination of Cloudflare protection, recent registration, and low detection counts (2 of 95 vendors on VirusTotal) indicates a likely attempt to evade automated detection while maintaining operational persistence. No evidence of takedown or sinkholing was observed as of July 12, 2026, and the domain remains active.