aurexget[.]com

The domain aurexget.com was registered on December 22, 2025 through MAT BAO CORPORATION and is currently resolved to the IP address 13.225.196.2, which belongs to Amazon.com, Inc. (AS16509) in California. The authoritative nameservers are dee.ns.cloudflare.com and kevin.ns.cloudflare.com, indicating that the domain is fronted by Cloudflare’s network and is using HTTP/3. An SSL certificate issued by Google Trust Services under the WE1 identifier is present, confirming that TLS termination is handled by a legitimate certificate authority.

HTTP requests to the host return a 403 status code, and the domain has been taken offline at the time of this assessment. Threat intelligence sources flag the domain as a generic phishing vector: PhishDestroy has blocked it, Google Safe Browsing categorises it as social engineering, and AlienVault OTX reports the domain in three separate threat pulses. VirusTotal analysis shows that nine out of ninety‑three scanning engines have raised detections, and the domain appears on one public security blocklist.

These converging indicators suggest that malicious actors have used the infrastructure to host phishing content, though the exact payload or targeted brand is not disclosed in the available data. Defenders should continue to block the domain at perimeter firewalls and DNS filters, monitor for any resurgence of activity should the domain be re‑hosted, and correlate any internal logs that reference the IP 13.225.196.2 or the associated Cloudflare nameservers. Given the domain’s recent creation, its rapid appearance on multiple reputation services, and its current offline status, the risk remains elevated until the infrastructure is fully remediated or the domain is permanently taken down.