auramicalipro[.]com

Analysis of auramicalipro.com shows a newly registered domain (creation date February 21, 2026) that was used to impersonate the brand “base.” The site presented the page title “AuraMicaliPro - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni,” indicating an attempt to lure victims with a purported official trading platform and a large number of reviews. The domain resolves to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. No SSL certificate was detected, implying the site operated over plain HTTP. Registrar information points to Gransy, s.r.o., and the authoritative nameservers are houston.ns.cloudflare.com and maria.ns.cloudflare.com.

Security telemetry shows that eight of ninety‑three VirusTotal scanners flagged the domain as malicious, and it appears on one external blocklist. PhishDestroy has already taken the domain offline, and the current status is reported as offline. Reputation services assign extremely low trust scores (Scamadviser 1/100, Gridinsoft 0/100), reinforcing the malicious assessment. While the exact page content cannot be verified due to the offline status, the combination of brand impersonation in the title, recent registration, lack of TLS, low trust scores, and multiple vendor detections provides strong evidence of a fraud operation.

Defenders should continue to block the domain and the associated IP address, monitor for any resurgence of the same nameservers or registrar usage, and consider adding the domain to internal deny lists. Additional investigation may focus on any related domains registered through Gransy, s.r.o. and on traffic patterns to the Cloudflare IP range that could indicate a broader campaign.