aimmaqket[.]com

This domain, aimmaqket.com, has been confirmed as a credential theft phishing site targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate authentication portals to harvest usernames, passwords, and session tokens. No specific brand impersonation or cryptocurrency drainer kit signatures were identified in available telemetry, though the credential harvesting methodology aligns with broader phishing campaigns observed in Q1 2024. The domain exhibits characteristics consistent with automated phishing infrastructure, including rapid deployment and short operational lifespans. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which has been linked to other transient phishing campaigns. Detection metrics show 4 out of 95 security vendors on VirusTotal flagged the domain as malicious, while AlienVault OTX recorded its presence in one threat intelligence pulse. The domain appears on a single security blocklist and is assigned a trust score of 0/100 by Gridinsoft. No detections were reported by Google Safe Browsing at the time of analysis, though this may reflect the domain's short-lived nature rather than benign intent. The domain is currently offline, likely taken down following detection or as part of the threat actor's operational cycle. However, the infrastructure remains a residual risk, as the registrar and hosting provider have not been confirmed to have implemented preventive measures against re-registration or IP reuse. Users who may have interacted with the domain are advised to revoke any active sessions, rotate credentials for potentially compromised accounts, and monitor for unauthorized access. Organizations should update blocklists to include the domain and associated IP, while security teams should investigate correlated indicators such as the registrar and hosting patterns for proactive threat hunting.