aurumcryptacapital[.]com

Analysis of aurumcryptacapital.com indicates that the domain was registered on September 18, 2025 through TUCOWS.COM, CO. The authoritative name servers are ns1.vercel-dns.com and ns2.vercel-dns.com, pointing to a hosting environment that resolves to the IPv4 address 64.29.17.65. The domain appears on a single public blocklist and is actively listed by PhishDestroy, confirming that threat‑intelligence feeds have flagged it as malicious.

VirusTotal records show that the domain was scanned by 91 anti‑malware vendors; none of the vendors reported a detection at the time of the scan, but the absence of detections does not constitute evidence of benign behavior. No additional public indicators such as SSL certificate details, HTTP response codes, page title, or brand references have been disclosed, leaving the exact content and attack vector unverified. The infrastructure choices—use of Vercel DNS and a single IP address—are consistent with a low‑profile hosting setup often leveraged for short‑lived phishing campaigns.

Given the active blocklist status, the recent registration date, and the lack of definitive benign indicators, defenders should treat aurumcryptacapital.com as a high‑confidence phishing risk. Recommended mitigations include adding the domain to DNS blocklists, deploying URL filtering at the gateway, monitoring outbound traffic for connections to the IP 64.29.17.65, and instituting user awareness alerts referencing the domain name. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are advised to capture any future changes in the domain’s threat profile.