aseglarariamos[.]cyou

The domain aseglarariamos.cyoung was registered on 2025-12-11 through Cosmotown Inc and uses the authoritative name servers ndns1.cosmotown.com and ndns2.cosmotown.com. DNS resolution points to the IPv4 address 50.6.197.178, which belongs to AS19871 Network Solutions, LLC and is geolocated in the United States. No TLS certificate is present on the host, indicating that the site was served only over HTTP. A static snapshot of the landing page revealed the title “Energen – Free Bootstrap 4 Template by Colorlib”, a generic template reference that does not disclose the intended victim brand. The site has been taken offline, and its current HTTP status is reported as unavailable.

Reputation services provide converging evidence of malicious intent. Gridinsoft assigned a trust score of 0 out of 100. VirusTotal recorded 15 detections out of 93 scanned engines. Google Safe Browsing classifies the domain as a social‑engineering threat. AlienVault OTX lists the domain in two separate threat‑intel pulses.

The domain is also listed on a public blocklist and has been actively blocked by the PhishDestroy sinkhole. Because the infrastructure is already observed on multiple reputable blocklists, defenders should add aseglarariamos.cyou and its resolving IP 50.6.197.178 to network and email deny lists. Continuous monitoring of the IP range owned by Network Solutions, LLC is advised in case the operator re‑hosts additional phishing payloads. Absence of TLS and the low trust score suggest that any future activation would likely be unencrypted, simplifying detection by DPI or proxy solutions. At present, the limited evidence—primarily the page title and the observed detections—confirms that the domain was used for a generic phishing campaign, but the exact target brand and lure remain unknown.