aqrl-trade[.]com

The domain aqrl-trade.com is actively involved in a brand impersonation campaign, specifically targeting the brand 'across'. The fraudulent site presents itself as 'AQR L - Trade · Home', misleading users into believing they are interacting with a legitimate brand. The absence of an SSL certificate further underscores the deceptive nature of this domain, which is designed to mislead and potentially capture sensitive user information.

Technical indicators reveal that aqrl-trade.com is hosted on the IP address 104.21.7.141, associated with AS13335 Cloudflare, Inc., located in the United States. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 17, 2025. Currently, it is flagged by 7 out of 95 security vendors on VirusTotal, indicating a substantial level of recognition by security systems. Furthermore, the domain appears on one security blocklist, highlighting its malicious intent. However, it has not been flagged by Google Safe Browsing at this time.

The domain remains active, posing a high risk to users who may be deceived by its impersonation tactics. It is currently blocked by at least one security service, PhishDestroy, but the threat persists due to its active status. Users and organizations are advised to exercise caution and implement robust security measures, such as DNS filtering and user education, to mitigate the risk posed by this domain. Continuous monitoring and reporting of such domains are recommended to reduce the impact of these phishing campaigns.