aerodromeauthorization[.]com

aerodromeauthorization.com entered the PhishDestroy evidence set on Aug 22, 2025. The hostname explicitly references Aerodrome; stored content metadata identifies the same apparent target. The stored content classification is impersonation. The assembled evidence scores 87/100 (high).

Five independent sources are positive: VirusTotal, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar on Jul 28, 2026 at 02:21 UTC. ScamSniffer, Polkadot, Enkrypt, and Codeesura listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict on Mar 5, 2026 at 22:49 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:43 UTC; content was unavailable. Registration records for the domain list Ultahost, Inc. as the registrar and Aug 17, 2025 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 82.25.35.148 on AS21859 (ZEN-ECN, US). The associated network metadata labels the endpoint as AS21859 Zenlayer Inc in London, GB. The stored server header is Apache/2.4.52 (Ubuntu). Captured page title: “SECURITY CHECK”. DOM analysis completed on Apr 23, 2026 at 23:21 UTC; stored DOM score 85/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 2, 2026 at 04:03 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

Taken together, the page content and independent findings support classifying this hostname as Aerodrome-themed impersonation.