aurextrades[.]com
“Aurex Trades - The Most Trusted Crypto Company”
Résumé des preuves
On 23 July 2026, the domain aurextrades.com was identified as a generic phishing site targeting cryptocurrency users. The site presented the page title “Aurex Trades – The Most Trusted Crypto Company,” suggesting an attempt to convey legitimacy. Registration data shows the domain was created on 21 February 2026 through Cosmotown, Inc., and is currently resolved to the IP address 161.97.121.66, which belongs to AS51167 (Contabo GmbH) in France. The hosting provider is fronted by Cloudflare, as indicated by the authoritative nameservers arel y.ns.cloudflare.com and toby.ns.cloudflare.com, and the site supported HTTP/3. An SSL certificate issued by Google Trust Services under the WE1 root was observed, confirming the presence of TLS encryption.
Technical fingerprinting revealed the use of common web libraries including Bootstrap, OWL Carousel, jQuery, FancyBox, and the live‑chat widget JivoChat. These components are often found in legitimate sites and do not, by themselves, indicate malicious intent, but they confirm that the page was built with publicly available frameworks. VirusTotal analysis recorded 13 detections out of 93 scanned security vendors, reinforcing the suspicion of malicious activity. The domain also appears on a single security blocklist and was blocked by the PhishDestroy service, after which the site was taken offline. Gridinsoft assigned a trust score of 1 out of 100, the lowest possible rating.
While the offline status precludes real‑time interaction, the available evidence is sufficient to label the infrastructure as confirmed phishing. Uncertainties remain regarding the exact phishing kit or the specific victim collection mechanism, as no screenshots or form captures have been disclosed. Defenders should continue to block aurextrades.com at network borders, update endpoint protection rules with the observed hash signatures, and monitor for any re‑hosting attempts that reuse the same IP range or SSL certificate fingerprint.
Data Coverage
Signaux de sécurité
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
VirusTotal
13 → 14
-
État du domaine
Accessible → Inaccessible
-
État du domaine
Inaccessible → Accessible
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
7 technologies identifiées avec une forte confiance
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of aurextrades.com · checked Mar 2, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif