autoport-global[.]store

This domain, autoport-global.store, was registered on 21 February 2026 through Beget LLC and uses the default Beget name servers (ns1.beget.com, ns1.beget.pro, ns2.beget.com, ns2.beget.pro). The site is currently taken offline, but historical data shows it hosted a page titled “AMLBot – Comprehensive AML Compliance Solutions for Crypto”, which aligns with the listed scam type of a crypto‑related fraud. The page explicitly impersonates the Binance brand, indicating a targeted brand‑impersonation campaign aimed at cryptocurrency users. Technical resolution points to the IPv4 address 45.82.249.131, which belongs to AS209847 (WorkTitans B.V.) and is geolocated to Chile. No TLS certificate was observed for the domain, meaning communications would have been unencrypted.

The domain appears on at least one security blocklist and was flagged by PhishDestroy, confirming that defensive feeds have already incorporated it. AlienVault OTX referenced the domain in a single threat‑intelligence pulse, providing additional community‑sourced context. Reputation scoring from Gridinsoft rates the domain at 0 / 100, effectively classifying it as highly untrustworthy. VirusTotal scans show that five of ninety‑three antivirus or URL‑reputation engines flagged the domain, reinforcing the suspicion of malicious intent. The limited number of detections suggests that some scanners may not yet recognize the specific campaign, but the presence of any positive votes warrants precaution.

Defenders should update domain‑allow and block lists to include autoport‑global.store, monitor outbound DNS queries for this FQDN, and inspect any recent traffic that may have reached the associated IP address. Because the site used a brand‑impersonation vector, security teams should also look for related Binance‑themed phishing emails or credential‑harvesting attempts in user reports. Continuous monitoring of the hosting ASN (WorkTitans B.V.