aurelianglobalcapital[.]com

Analysis of aurelianglobalcapital.com indicates infrastructure consistent with an active investment-themed scam operation. The domain was registered on November 2, 2025, through HOSTINGER operations, UAB, a registrar frequently utilized for low-cost, short-lived fraudulent domains. It currently resolves to IP address 92.113.16.174, which has not been widely flagged in public threat intelligence feeds but remains under scrutiny due to its association with a known phishing blocklist. The domain is served by nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration commonly observed in domains using low-cost or automated DNS services that lack strict abuse controls.

As of July 27, 2026, the domain appears on one security blocklist, specifically PhishDestroy, which classified it as malicious. While 91 vendors on VirusTotal scanned the domain, none currently flag it as malicious. The absence of detections does not confirm safety; many fraudulent domains evade initial detection through rapid rotation or minimal initial exposure. The domain remains active, with no evidence of takedown or deactivation.

Infrastructure analysis reveals no SSL certificate details or HTTP response data at this time, limiting further technical assessment. The exact content and target brand of the site are not yet confirmed through available metadata, though the domain name suggests a financial or investment theme. Defenders should treat this domain as high-risk and implement blocking at the DNS or network level. Monitoring for changes in detection status, IP resolution, or nameserver updates is recommended, as these may indicate shifts in the threat actor's infrastructure or renewed malicious activity.