ore-supply[.]live

The domain www.ore-supply.live was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently listed as offline. DNS resolution points to the Amazon Web Services address 216.198.79.65, which belongs to ASN AS16509 owned by Amazon.com, Inc., and the hosting location is identified as the United States. The site served an SSL certificate issued by Let’s Encrypt (R12) and employed HTTP Strict Transport Security (HSTS). Analysis of the page title returned "ORE Early Supporters Rewards | Claim Your Rewards," indicating a crypto‑related reward scheme, and the infrastructure fingerprint shows the use of Vercel as a hosting front‑end on top of Cloudflare name servers (meera.ns.cloudflare.com, doug.ns.cloudflare.com).

The domain appears on a single security blocklist and was blocked by PhishDestroy. Independent scanning on VirusTotal recorded seven detections out of ninety‑three antivirus engines, reinforcing the malicious classification. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence of abuse.

While the site is no longer reachable, the combination of a newly created domain, cloud‑based hosting, a legitimate‑looking SSL certificate, and the crypto reward narrative aligns with known patterns of crypto‑drain phishing campaigns. Defenders should continue to block the resolved IP 216.198.79.65, add the domain to URL filtering policies, and monitor for any re‑registration or similar sub‑domains using the same registrar or hosting configuration. Ongoing vigilance is advised, especially for users receiving unsolicited messages that reference ORE early supporter rewards, as the campaign may evolve to target additional cryptocurrency‑related assets.