claim[.]socialfixation[.]com[.]au

Analysis of claim.socialfixation.com.au shows that the domain was registered through GoDaddy.com, LLC and uses the default GoDaddy nameservers ns19.domaincontrol.com and ns20.domaincontrol.com. The authoritative IP resolves to 52.223.52.2, an Amazon.com, Inc. address in the United States belonging to ASN 16509. The site presented a page title “Social Fixation” and was classified as a crypto‑scam that impersonates the brand “across”. Technical fingerprints include a Let’s Encrypt certificate (E8), enforcement of HSTS, and the use of modern web stacks such as Framer Sites, React, HTTP/3 and a Facebook Pixel.

A Gridinsoft trust score of 0/100 and a 404 HTTP response indicate that the content has been taken offline. The domain is listed on one security blocklist and is actively blocked by PhishDestroy, confirming that security vendors have taken remedial action. No detections were reported by the 95 VirusTotal scanners that examined the host, but the absence of detections does not constitute proof of safety.

The current offline status prevents direct inspection of the payload, making the exact malicious content uncertain. Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP address and ASN for any re‑use, and add the domain to internal threat intel feeds. Ongoing observation of GoDaddy‑registered domains that host similar technology stacks and target the “across” brand is recommended, as the registration pattern and low trust score are consistent with prior crypto‑draining campaigns.