auxrex[.]com

Analysis conducted on July 25, 2026 identifies www.auxrex.com as an active social media phishing infrastructure. The domain was registered on July 09, 2025 through GoDaddy.com, LLC and currently resolves to IP address 104.26.1.16, which belongs to AS13335 Cloudflare, Inc. located in the United States. No SSL certificate is presented, and the web server returns HTTP 200, confirming the site is reachable. The page title reported by crawlers is “Aurex”, while the underlying technology stack includes Cloudflare’s edge services and HTTP/3 support.

Nameserver records point to braden.ns.cloudflare.com and magali.ns.cloudflare.com, consistent with the observed hosting provider. VirusTotal has flagged the domain in 8 of 95 scanned security vendors, indicating a measurable detection rate among AV products. Additionally, the domain appears on one external security blocklist and is actively blocked by the PhishDestroy service, reinforcing its classification as malicious. The scam type is listed as “Social Media Phishing”, suggesting the site is used to harvest credentials or personal information by masquerading as a legitimate social media service, though the exact lure and target pages have not been publicly disclosed.

Given the combination of recent registration, lack of TLS, and multiple vendor detections, defenders should add www.auxrex.com to URL filtering and DNS block lists, monitor for any new sub‑domains resolved to the same IP range, and consider enforcing strict TLS inspection policies to prevent accidental exposure. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are recommended to capture any changes in detection status. Until further content analysis is available, the site should be treated as a high‑risk phishing endpoint.