aramcointernational-supplier[.]com

The domain aramcointernational-supplier.com was registered on March 31, 2026 through Ultahost, Inc. It resolves to the IPv4 address 159.100.6.19, which geolocates to Germany and is associated with the same registrar. The site serves an HTTP 301 redirect and presents the page title "Marketz Group | Consultores | Marketing | Representantes Comerciales y Ventas," suggesting an attempt to masquerade as a marketing consultancy. The TLS certificate is issued by Let’s Encrypt (R13), providing no indication of malicious signing. Infrastructure signals include a single MX record pointing to the domain itself and a Gridinsoft trust score of 0 out of 100. Threat intelligence references include one AlienVault OTX pulse and a single detection by VirusTotal among 92 security vendors. The domain appears on one public blocklist and is currently blocked by PhishDestroy. No payload, credential‑stealing page, or specific phishing lure has been observed; the exact content of the hosted page remains unverified. Defenders should add the domain to deny‑list rules, monitor DNS queries for the associated IP, and consider full URL filtering for any traffic to the host. Ongoing observation is advised to detect any future changes in page content or additional malicious activity.