m[.]aetbaseniorproducts[.]com

Analysis of the domain m.aetbaseniorproducts.com indicates it was actively flagged as a crypto scam prior to being taken offline on or before July 24, 2026. The domain was registered through GoDaddy.com, LLC on March 7, 2018, and resolved to the IP address 139.162.174.209, hosted on Akamai Connected Cloud (AS63949) in Germany. Nameserver records point to chuangchuang.ns.giantpanda.com and meilan.ns.giantpanda.com, suggesting the use of a third-party DNS provider commonly associated with low-reputation infrastructure. Detection data from available sources shows the domain appeared on at least one security blocklist, and two of 95 security vendors on VirusTotal flagged it as malicious.

The Gridinsoft trust score of 0/100 further supports its classification as high-risk. Technologies detected on the domain include Astro, Google Analytics, Google AdSense, Funding Choices, Cloudflare Browser Insights, and Cloudflare itself, along with HTTP/3 support. The SSL certificate was issued by Let’s Encrypt (R13), a common choice for both legitimate and malicious sites. The page title, 'aetbaseniorproducts.com,' does not explicitly confirm the targeted brand, but the scam type was explicitly classified as a crypto scam in available threat intelligence.

No evidence suggests the domain was part of a broader phishing kit or mimicked a specific financial institution. Defenders should treat this domain as compromised infrastructure and monitor any associated IPs, nameservers, or registrant details for further malicious activity. Given its current offline status, no live threat remains, but historical indicators may aid in identifying related campaigns.