aurelismcb[.]com

Analysis of aurelismcb.com, created on November 06, 2025 and registered through Dynadot LLC, shows a high‑risk brand‑impersonation campaign targeting the foundation brand. The site resolves to IP 198.23.193.170, an address hosted by HostPapa (AS36352) in the United States. The server presents a valid SSL certificate issued by Google Trust Services under the WE1 label, and HTTP requests return a 200 status code, indicating the site is reachable and serving content. The page title returned by the HTTP response is "Home - Aurelis Mcb," which aligns with the reported scam type of brand impersonation.

VirusTotal scans have flagged the domain in 7 of 95 security vendors, and the domain appears on a single security blocklist. Independent intelligence sources corroborate activity: PhishDestroy has blocked the domain, and AlienVault OTX references the domain in 22 threat‑intel pulses. Reputation services provide low confidence scores, with Scamadviser assigning a trust rating of 45 / 100 and Gridinsoft reporting a score of 0 / 100. Nameserver configuration uses dns1.geebytesdns.com and dns2.geebytesdns.com, and the MX record points to aurelismcb.com itself, suggesting potential email abuse.

While the exact page content has not been examined, the combination of brand‑targeted naming, active hosting, low reputation metrics, and multiple vendor detections strongly indicates a malicious operation. Defenders should add the domain and its IP address to network blocklists, monitor DNS queries for the associated nameservers, and enforce SSL pinning where feasible. Continuous re‑evaluation of the domain’s status is advised, as further indicator enrichment may reveal additional command‑and‑control infrastructure or phishing payloads.