axinoralogist[.]com

The domain axinoralogist.com was a generic phishing site designed to harvest user credentials or personal information without impersonating a specific brand. It posed an elevated risk due to its active phishing content, though no crypto drainer kit or known brand impersonation was identified. As of the latest verification, axinoralogist.com has been taken offline.

Technical analysis shows that axinoralogist.com was flagged by 2 of 95 VirusTotal security vendors, including alphaMountain.ai and Sophos. The domain was registered through Global Domain Group LLC on July 04, 2025, and resolved to the IP address 198.12.66.123, hosted on AS36352 (HostPapa) in the US. It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by Let's Encrypt / R12. The observed page title was 'Home | Page,' and technologies detected included Bootstrap, GSAP, Swiper, jQuery, JivoChat, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with axinoralogist.com should immediately change any credentials entered on the site, particularly if reused across other platforms. Enable two-factor authentication (2FA) on all accounts as an additional security measure. Monitor financial and online accounts for unauthorized activity. Report the phishing domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org or through local cybercrime reporting channels.