aquariussoftwares[.]com

Analysis of aquariussoftwares.com shows an active infrastructure that aligns with a high‑risk generic phishing classification. The site resolves to IP 192.3.190.186, hosted in the United States under ASN 36352 (HostPapa) and is served by LiteSpeed with HTTP/3 enabled. Front‑end libraries include Bootstrap, jQuery and assets delivered via jsDelivr, indicating a modern web stack. The domain was registered on 2026‑02‑21 through OwnRegistrar, Inc., and is bound to the authoritative nameservers dns1.webproserver.com and dns2.webproserver.com. TLS is provided by a Let’s Encrypt certificate (R12), and the HTTP response code is 200, confirming a reachable web service. Reputation signals are poor: Gridinsoft assigns a trust score of 0 / 100, the domain appears on one security blocklist, and PhishDestroy has already blocked it. VirusTotal records a single positive detection out of 93 scanners, reinforcing malicious suspicion. MX records list a single priority‑0 host matching the domain, suggesting limited mail infrastructure. No direct analysis of the page content or login mechanisms is available, so the exact phishing payload remains unverified. Defenders should treat the domain as malicious, block it at network and endpoint layers, monitor for any associated C2 traffic, and consider sinkholing the IP address while awaiting further forensic evidence.