aeon-financialcapital[.]com

This domain is flagged as a high-risk generic phishing threat and remains active as of July 27, 2026. Registered through Dynadot Inc on January 02, 2025, the domain resolves to IP address 149.56.250.51. Infrastructure analysis reveals nameservers hosted under ddoscure.com, a provider often associated with DDoS protection services.

VirusTotal scan results indicate 12 of 91 security vendors flag this domain as malicious, and it appears on one security blocklist maintained by PhishDestroy. No specific brand or page content has been identified in the available intelligence; the exact nature of the phishing scheme—whether credential harvesting, financial fraud, or another vector—remains unconfirmed without direct page analysis. The domain's creation date over a year prior to the report date suggests it may have been prepared in advance or repurposed for malicious activity.

Defenders should treat this domain as a confirmed threat, block all traffic to aeon-financialcapital.com and its associated IP address 149.56.250.51 at the network perimeter, and monitor logs for any historical connections. Email gateways should quarantine messages containing links to this domain. Given the high risk level and active status, immediate action is recommended to prevent potential compromise.