aureclimited[.]org

The domain aureclimited.org was created on 17 December 2024 and is currently taken offline. It resolves to the IP address 198.12.66.123, which is hosted by HostPapa in the United States under ASN 36352. The hosting environment presents a Cloudflare front‑end and serves content built with PHP, particles.js, YouTube embeds, UIKit, Smartsupp, jQuery and GetButton. The site used a Google Trust Services / WE1 SSL certificate, indicating a legitimate‑looking HTTPS presentation. Registration data shows the registrar as GRANSY S.R.O D/B/A SUBREG.CZ, and the authoritative nameservers are ns1.host-forest.com and ns2.host-forest.com.

The page title returned was “Home”, and the domain was flagged as a crypto‑scam that impersonates the brand Across. Reputation checks are extremely low, with Gridinsoft and Scamadviser both assigning a score of 1 out of 100. The domain appears on a single security blocklist and has been blocked by PhishDestroy. VirusTotal recorded three detections out of ninety‑five scanners, and an AlienVault OTX pulse references the indicator once.

An MX record exists for a sub‑domain “_dc-mx.bbf6cd7a5641.aureclimited.org”, but no mail service appears to be active. Defenders should add the IP 198.12.66.123 and the domain name to network‑level blocklists, monitor DNS queries for the associated nameservers, and enforce TLS inspection to detect any residual HTTPS traffic. Given the low trust scores, the presence on a blocklist, and the confirmed crypto‑scam classification, the domain should be treated as a high‑confidence malicious indicator. Continuous threat‑intel feeds should be consulted for any re‑appearance, and any inbound connections to the hosting provider’s AS should be scrutinized for potential reuse of infrastructure.