aimpowerment[.]com

The domain aimpowerment.com was registered on 23 April 2026 through the registrar TuringSign Inc. d/b/a Cosmotown. The public‑facing website presents a page titled “Plan, Save & Invest – AimPowerment”, which mimics financial planning services. HTTP requests to the site return status code 200, indicating the web server is actively serving content. Technical analysis shows that aimpowerment.com resolves to the IPv4 address 168.119.37.114, which geolocates to Germany and is hosted by Hetzner. The domain uses the authoritative name servers dns1.lytehosting.com through dns4.lytehosting.com. An active TLS certificate issued by Let’s Encrypt (R13) secures the site, confirming the presence of HTTPS. The registrar information and hosting details suggest a quickly provisioned infrastructure typical of short‑lived malicious campaigns. Open‑source intelligence indicates the domain appears on a single security blocklist and is actively blocked by PhishDestroy. AlienVault OTX references the domain in one threat‑intel pulse, linking it to credential‑harvesting activity. Despite the lack of detections on VirusTotal (0/95 scanners), the collective indicators classify the site as a generic phishing infrastructure and its status is marked as active and under investigation. Given the current evidence, defenders should treat aimpowerment.com as a high‑confidence phishing vector. Recommended mitigations include adding the domain and its associated IP address to outbound and inbound filtering rules, monitoring DNS queries for the listed LyteHosting name servers, and employing URL reputation services to block user access. Continuous re‑analysis is advised, as additional payloads or victim reports may emerge that could refine the risk assessment.