activeglobalskymining[.]click

The domain activeglobalskymining.click was registered on July 29, 2025 through OwnRegistrar, Inc. and is currently taken offline. DNS resolution points to the IPv4 address 176.9.7.179, which belongs to the Hetzner Online GmbH network (AS24940) located in Germany. The domain is served by the authoritative nameservers dns1.cupisweb.com and dns2.cupisweb.com, with an additional null entry observed in the nameserver set. No TLS certificate is presented for the site, indicating that any client connections would be unencrypted HTTP.

The page title retrieved during the brief observation reads "bitline option signals is one of the world's leading forex,stock and crypto trading platform," which aligns with the listed scam type of a crypto‑related fraud and the broader classification of brand impersonation targeting the Across brand. Reputation metrics are extremely low, with Gridinsoft assigning a trust score of 0 / 100 and Scamadviser a score of 1 / 100, reflecting the high likelihood of malicious intent. VirusTotal analysis reports that nine out of ninety‑five scanning engines flagged the domain as malicious, corroborating its suspicious nature. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

Although the site is no longer reachable, the infrastructure footprint—Hetzner hosting, lack of SSL, and the low trust scores—remains indicative of a typical crypto scam deployment. Defenders should continue to enforce blocklist rules for the IP 176.9.7.179, monitor the associated nameservers for any re‑registration attempts, and ensure that any client traffic to activeglobalskymining.click is denied at the network perimeter. Ongoing vigilance is advised given the recent registration date and the potential for rapid re‑use in similar fraudulent campaigns.