cryptominers[.]ae

cryptominers.ae is currently active and hosts a site titled "Crypto Mining Solutions in the UAE - CryptoMiners.ae". The page claims to offer mining services and explicitly references Ethereum, matching the listed brand impersonation. Technical analysis shows the domain resolves to 3.167.227.64, an IP owned by Amazon.com, Inc. (AS16509) located in Germany. The site is delivered through Amazon Web Services, using CloudFront as a CDN, and presents a TLS certificate issued by Amazon RSA 2048 M01. HTTP response code is 301, indicating a redirect. Detected server-side components include Node.js, React, Next.js, Webpack, and the payment gateway Stripe, while traffic is served over HTTP/3. Reputation services assign a Scamadviser score of 46/100 and a Gridinsoft score of 0/100; the domain appears on one public blocklist and has been listed by PhishDestroy. VirusTotal analysis reports a single vendor flag among 95 scanners. The available evidence confirms that the domain is being used for a cryptocurrency-related scam that impersonates Ethereum, but the exact content and any credential-capture mechanisms have not been publicly captured. Defenders should add the domain and its associated IP to blocklists, monitor for related AWS-hosted sub-domains, and update intrusion-detection signatures to flag redirects to this host. Continuous observation is advised to detect any evolution of the infrastructure or new payloads.