araucahkbm[.]live

The domain araucahkbm.live is currently engaged in active brand impersonation, masquerading as Microsoft to deceive visitors. This threat aligns with social engineering tactics designed to harvest credentials or deliver malicious payloads under the guise of a legitimate corporate action. PhishDestroy assesses the risk level as elevated due to its active status and confirmed association with malicious infrastructure.

This domain was registered through MarkMonitor Inc. on April 30, 2025, and resolves to IP address 40.91.108.115. Security telemetry confirms a VirusTotal detection rate of 22 out of 95 vendors, with blocklists from PhishingDB and Maltrail flagging its hostile activity. Notably, the domain leverages a fraudulent SSL certificate issued to Microsoft Corporation, enhancing its authenticity while distributing a phishing drainer kit.

As of the latest analysis, araucahkbm.live remains active and poses immediate risk to users encountering it via phishing campaigns or malvertising. Immediate defensive actions include blocking the domain at DNS and network levels and updating SIEM rules to alert on connections to 40.91.108.115. While community response measures have reduced exposure, residual risk persists due to the domain's recent registration and ongoing impersonation campaign. Users are strongly advised to avoid interaction and report encounters to security teams.