aurumtrustglobal[.]com

Analysis of aurumtrustglobal.com shows a short‑lived infrastructure designed to impersonate a financial brand. The domain was registered on June 01, 2025 through Ultahost, Inc. and uses four Ultahost nameservers (ns1‑ns4.ultahost.com). DNS resolution points to IP address 198.54.132.28, which resides in Canada and is announced by AS11878 tzulo, inc. No TLS certificate was presented, indicating the site operated without HTTPS.

The page title captured during the brief online period reads "Aurum Trust Global Bank - Dedicated to innovating, simplifying, and humanizing d," confirming the intent to mimic a banking entity. VirusTotal recorded a single positive detection out of 95 scanned vendors, and the domain is listed on one external security blocklist. Additional defensive feeds have flagged the site; PhishDestroy reports it as blocked, and Gridinsoft assigns a trust score of 0 / 100, reflecting a high confidence of malicious intent.

The site has since been taken offline, but the underlying IP and registrar remain active. Defenders should add the IP 198.54.132.28 to network deny lists, monitor for any re‑registration of the domain or similar sub‑domains under the same registrar, and enforce blocking of the domain in web filtering solutions. Continuous observation of the associated ASN (AS11878) for new suspicious hostnames is recommended, as the infrastructure could be repurposed for future brand‑impersonation campaigns.