aaabtc[.]assetux[.]com

The domain aaabtc.assetux.com was registered through GoDaddy.com, LLC on 21 February 2026. DNS resolution points to the IPv4 address 217.60.38.159, which belongs to AS56971, a cloud provider hosting infrastructure located in Hong Kong. The authoritative name servers are ns29.domaincontrol.com and ns30.domaincontrol.com, both operated by GoDaddy. An SSL certificate issued by Let’s Encrypt (identifier “E7”) is present, indicating the site was served over HTTPS at some point, but the current HTTP response is a 502 status code and the domain is flagged as offline by the monitoring source. The page title returned from the host is “aaabtc.assetux.com”, providing no additional context about the content.

Security telemetry classifies the site as a crypto‑scam phishing operation. It appears on a single external blocklist and has been actively blocked by the PhishDestroy service. On VirusTotal the site was flagged by 1 of 93 scanning engines, and the Gridinsoft trust score is 0 / 100, reflecting a high confidence of malicious intent. The technology stack identified includes Node.js, Ubuntu, Nginx, Vue.js, Nuxt.js, UIKit, and the CDN service Cloudflare, with additional assets served from cdnjs. These components are typical of a dynamically generated web application but do not reveal the specific payload or credential‑harvesting mechanisms employed.

At present, no additional evidence such as phishing page screenshots, credential‑stealing forms, or malicious payload hashes has been released, so the exact tactics, techniques, and procedures remain unknown. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resolution to the IP 217.60.38.159, and consider adding the IP to threat‑intel feeds. Given the low trust score and existing blocklist entries, any outbound connections from internal hosts to this address should be denied.