aeonroll[.]com

On 24 July 2026, aeonroll.com was observed hosting a page titled “Aeonroll | Get more freedom in the markets”. The domain was registered on 6 March 2026 through Hostinger Operations, UAB and is served by the default parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to the IP address 92.113.23.175, which belongs to AS47583 Hostinger International Limited and is geolocated to Germany. No TLS certificate was presented, indicating the site operated over plain HTTP. The site was flagged by PhishDestroy and appears on a single external blocklist.

VirusTotal analysis recorded a single positive detection out of 94 scanned security vendors, confirming at least one anti‑malware engine identified malicious behavior. The domain is currently listed as offline, and no further HTTP response details are available. The available evidence suggests the domain was used for a generic phishing campaign, likely leveraging the financial‑oriented phrasing in the page title to lure victims. However, the exact payload, credential‑stealing mechanisms, or targeted brands have not been disclosed, leaving the full attack vector uncertain. The lack of an SSL certificate and reliance on parking nameservers are consistent with transient malicious infrastructure.

Defenders should add aeonroll.com to their deny‑list and monitor DNS queries for the associated IP range. Network sensors should block outbound connections to 92.113.23.175 and alert on any HTTP traffic to the domain, even if the site is presently offline, as the infrastructure could be reactivated. Continuous re‑scanning with multi‑engine services such as VirusTotal is recommended to capture any new detections. Organizations should also review email filtering rules for messages referencing “freedom in the markets” or similar language to reduce the risk of successful phishing attempts.