aosl-online[.]com

Analysis of the domain aosl-online.com indicates active generic phishing infrastructure. The site presents the page title "aosl-online" and resolves to IP address 163.61.188.2, which is hosted in the United States under AS153568 (NEW DHAKA HARDWARE). The domain was registered on December 29, 2023 through NameSilo, LLC and is using the nameservers dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com. The TLS certificate is issued by Let’s Encrypt (R13), and an HTTP request returns a 200 status code. Reputation metrics show a Gridinsoft trust score of 0 out of 100 and the domain appears on one security blocklist, with PhishDestroy already flagging it. No public malware detections have been reported, but the absence of detections does not constitute evidence of safety. The current risk level is listed as under investigation and the domain remains active. Defenders should treat aosl-online.com as a malicious phishing resource, enforce network-level blocking, and monitor related IP 163.61.188.2 for any further suspicious activity. Additional telemetry, such as payload samples or sinkhole data, would be required to fully characterize the threat actor’s capabilities and objectives.