ai-connexlimited[.]com

Analysis of the domain ai-connexlimited.com indicates it is a confirmed brand impersonation site targeting Across, a recognized entity in the cryptocurrency or financial services sector. Registered on October 30, 2022, through Hosting Concepts B.V. d/b/a Registrar.eu, the domain was hosted on IP 195.35.38.164, operated by Hostinger International Limited (AS47583) in the United States. The site's page title, 'Ai Connex limited- Home | Learn, Trade and Earn Using our Artificial Intelligence Technology Today,' explicitly promotes AI-driven trading opportunities, a common lure in investment scams. Infrastructure analysis reveals the use of nameservers ns1.dns-parking.com and ns2.dns-parking.com, a pattern frequently observed in low-reputation or disposable hosting setups.

As of the report date, the domain is offline, but historical data shows it was flagged by 11 of 95 security vendors on VirusTotal, a strong indicator of malicious activity. It also appears on one security blocklist and was documented in a threat intelligence pulse on AlienVault OTX. The absence of an SSL certificate further reduces legitimacy, as modern financial or trading platforms typically enforce HTTPS. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as fraudulent.

The domain was blocked by PhishDestroy, a specialized anti-phishing service, confirming its role in brand impersonation. While the exact mechanics of the scam—such as whether it involved fake token sales, wallet drainers, or fraudulent trading platforms—remain unconfirmed due to the site's current offline status, the available evidence aligns with known patterns of AI-themed investment fraud. Defenders should treat this domain as a high-risk indicator and monitor for re-emergence under similar naming conventions or infrastructure. Organizations associated with Across should review logs for connections to this IP or domain and consider preemptive takedowns for any newly registered lookalike domains.