aramex[.]com-dqkof[.]life

The domain aramex.com-dqkof.life is currently active and resolves to the IPv4 address 188.114.97.3. DNS queries return no authoritative name server information, as the nameserver field is recorded as NS_NOT_FOUND, which may indicate misconfiguration or deliberate obfuscation. VirusTotal analysis shows that 9 of 91 security vendors have flagged the domain as malicious, confirming a consensus of moderate detection across the scanning community.

The domain is listed on a single external blocklist and is explicitly blocked by the PhishDestroy feed, demonstrating that at least one commercial anti‑phishing service has taken remediation action. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available in the current dataset, leaving the exact content and lure technique unverified. Given the high risk rating and the evidence of active phishing infrastructure, defenders should immediately add aramex.com-dqkof.life to network and DNS blocklists, enforce outbound filtering for the associated IP 188.114.97.3, and monitor for any related C2 patterns.

Continuous re‑scanning of the domain on VirusTotal and periodic checks of public blocklist feeds are advised to capture any changes in detection coverage. Organizations should also review authentication logs for attempted credential submissions that may be directed to this domain and consider implementing multi‑factor authentication to mitigate credential compromise. The limited visibility of the hosting environment suggests that further passive DNS and WHOIS enrichment may reveal the registrar or hosting provider, which can be used for takedown coordination if required.