italdexpro[.]net

On July 24, 2026, the domain italdexpro.net was observed as an offline infrastructure used to impersonate the brand “base”. The domain was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. It is hosted on Cloudflare, using the authoritative nameservers eugene.ns.cloudflare.com and opal.ns.cloudflare.com, and resolves to IP address 172.67.161.198, which belongs to AS13335 Cloudflare, Inc. in the United States. No TLS certificate was associated with the site at the time of analysis, indicating that HTTPS was not configured.

The page title returned by the server was “ItaldexPro - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni”, which suggests a focus on a trading platform but does not contain any direct reference to the impersonated brand. VirusTotal scanned the domain and recorded a single positive detection out of 93 security vendors. The domain appears on one external blocklist and has been actively blocked by the PhishDestroy mitigation service. Independent reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious classification.

The combined evidence indicates that the domain was likely created for a brand‑impersonation campaign targeting users of the “base” brand, although the exact phishing vector, credential‑harvesting pages, or lure content have not been captured because the site is currently offline. Uncertainty remains regarding the specific malicious payload, the duration of active hosting, and any associated command‑and‑control infrastructure. Defenders should continue to monitor DNS queries for italdexpro.net, enforce blocklisting at network perimeter, and ensure that any endpoint or web‑filter solutions reference the observed blocklist entry.