aurafry[.]shop

The domain aurafry.shop is currently active and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Registration was performed through Cloudflare, Inc., and the authoritative nameservers are marvin.ns.cloudflare.com and tegan.ns.cloudflare.com. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and supports HTTP/3, indicating modern delivery infrastructure. The HTTP response code is 200 and the page title returned is "EUTRADE | Cryptocurrency trading and invest platform," which does not directly reference the targeted brand. The domain is classified as a brand‑impersonation scam targeting the cryptocurrency aggregator 1inch. It appears on a single security blocklist, is listed as blocked by PhishDestroy, and has a Gridinsoft trust score of 0 / 100. VirusTotal analysis shows that 2 of 93 security vendors flagged the domain, confirming some level of malicious activity. No additional technical artifacts such as malware hashes or payloads are presently available. Defenders should treat aurafry.shop as a high‑risk indicator: block DNS resolution and HTTP traffic, add the domain to intrusion‑prevention and email‑filtering rules, and monitor for any related infrastructure reuse. Continuous re‑evaluation is advised, as further content analysis may reveal additional phishing or credential‑harvesting components.