ahrasjonews[.]com

Analysis of ahrasjonews.com indicates that the domain was registered on May 08 2025 through OwnRegistrar, Inc. and resolves to the IPv4 address 192.3.190.186, which is hosted by HostPapa under ASN 36352 in the United States. The domain’s DNS configuration lists authoritative servers dns1.webproserver.com and dns2.webproserver.com, with a null entry observed, and an MX record pointing to mail.ahrasjonews.com. The TLS certificate presented is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36, confirming an active HTTPS service at the time of capture. The site title returned from HTTP requests is “Ahrasjo News,” but the domain is flagged for brand impersonation of Facebook, categorised as a social‑media phishing campaign.

Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single external blocklist, with PhishDestroy confirming the listing. VirusTotal reports that one out of ninety‑five scanning engines has raised a detection, indicating limited but non‑zero malicious confidence. The domain is presently taken offline, preventing live interaction, and no additional content analysis is available.

Uncertainties remain regarding the exact phishing payload, credential‑harvesting mechanisms, and any associated command‑and‑control infrastructure, as no forensic page capture or URL paths have been disclosed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same IP or hosting provider, and incorporate the observed indicators—IP address, MX host, SSL fingerprint, and nameserver set—into threat‑intel feeds. Ongoing observation of the registrar and hosting environment is advised to detect potential re‑registration or clone activity.