assetsgoldsfx[.]org

Analysis of the domain assetsgoldsfx.org indicates it was actively involved in brand impersonation targeting Celer, a known blockchain interoperability platform. The domain was registered on May 8, 2025, through NameSilo, LLC, and resolved to the IP address 62.138.14.173, hosted on AS29066 (velia.net Internetdienste GmbH) in France. No SSL certificate was present, which is atypical for legitimate financial or blockchain-related services. The domain's nameservers (dns1.afeeshost.ltd, dns2.afeeshost.ltd, dns3.afeeshost.com) are associated with infrastructure frequently observed in phishing operations, though no direct ties to known phishing kits were confirmed in the available data.

The domain's page title, 'assetsgoldsfx.org,' does not provide clear evidence of its exact content or functionality, but its classification as a brand impersonation scam is supported by its presence on one security blocklist and a detection by one of 95 security vendors on VirusTotal. Scamadviser assigned it a trust score of 25/100, further suggesting elevated risk. The domain was flagged by PhishDestroy and has since been taken offline, though historical resolution and registration details remain relevant for tracking related infrastructure. Defenders should treat this domain as part of a broader pattern of Celer-branded phishing campaigns.

While the domain is no longer active, its hosting provider, registrar, and nameserver associations may warrant monitoring for future malicious activity. No additional details about the specific phishing mechanism (e.g., credential harvesting, wallet drainer) are available from the provided data. Organizations should review logs for connections to 62.138.14.173 or interactions with the domain prior to its takedown.