bluevek[.]com[.]globalautofxtrades[.]com

This domain, bluevek.com.globalautofxtrades.com, was registered on September 15, 2025 through Ultahost, Inc. and is served by four authoritative name servers (ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, ns4.ultahost.com). The site presents the page title “Bluevek” but provides no SSL certificate, indicating that traffic is unencrypted. Infrastructure analysis shows the domain resolves to IP 198.54.132.28, which is located in Canada and belongs to AS11878 (tzulo, inc.).

The IP address is currently listed on the PhishDestroy blocklist and the domain appears on one additional security blocklist, confirming that it has been identified as malicious by external threat‑sharing feeds. VirusTotal scans report that two of ninety‑five antivirus engines flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, further supporting a malicious classification. The domain is categorized as a brand‑impersonation scam, with the “brand target” field set to “across”, suggesting that the operator may be attempting to mimic multiple legitimate brands rather than a single named entity.

The site is presently offline, which limits real‑time observation, and no further content analysis is available beyond the page title. Defenders should continue to block the domain and its associated IP at perimeter firewalls and DNS resolvers, monitor for any resurgence of the host, and add the domain to internal threat‑intel feeds. Given the lack of TLS, low trust score, and multiple detections, the domain should be treated as high‑confidence malicious and excluded from any allow‑list.