azxlml[.]com

The domain azxlml.com was registered on December 22, 2025 through Gname.com Pte. Ltd. and resolves to the IP address 104.26.12.42, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents the page title "share-svr.com | 522: Connection timed out" and serves content over HTTPS using a Let’s Encrypt R12 certificate, indicating that TLS is active but the backend service is currently unresponsive. Infrastructure fingerprints show the web server runs Nginx and loads jQuery and Popper libraries, while HTTP Strict Transport Security (HSTS) is enabled, suggesting an attempt to enforce secure communications.

VirusTotal analysis reports that 11 of 93 scanning engines flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high confidence of malicious intent. AlienVault’s Open Threat Exchange lists the domain in one threat‑intel pulse, and two independent blocklists—PhishDestroy and ScamSniffer—have added azxlml.com to their repositories, reinforcing its classification as a malicious resource. The domain is currently taken offline, but historical evidence points to a crypto‑related scam campaign, as indicated by the explicit scam type designation.

Defenders should continue to block traffic to the resolved IP, monitor for any re‑use of the host infrastructure, and ensure that any client‑side redirects or scripts referencing azxlml.com are quarantined. Because the site is not reachable, active probing cannot yield additional artifacts; however, the combination of low trust scores, multiple vendor detections, and blocklist listings provides sufficient justification to treat azxlml.com as a high‑risk crypto scam indicator.