aesthetes[.]info

The domain aesthetes.info was registered on August 05, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the IP address 104.21.0.185, which is hosted on Cloudflare infrastructure (nameservers erin.ns.cloudflare.com and zac.ns.cloudflare.com). The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that it is being used for phishing-related activity. VirusTotal records show that the domain was scanned by 91 security vendors; none of the scanners raised a detection at the time of analysis. While the absence of detections does not constitute a safety guarantee, it demonstrates that the domain has not yet been associated with known malware signatures.

No additional intelligence such as Safe Browsing alerts, OTX references, SSL certificate details, HTTP response codes, trust scores, or page title information is presently available. Consequently, the primary evidence supporting a phishing classification consists of the blocklist entry, PhishDestroy block, and the recent registration date that aligns with typical phishing campaign lifecycles. Uncertainties remain regarding the specific phishing payload, targeted brand, and whether the site serves a credential‑harvesting form or redirects to malicious infrastructure.

Defenders should continue to monitor the domain, enforce URL filtering rules that block access to aesthetes.info, and consider adding it to internal blocklists. Network telemetry should be inspected for any outbound connections to the associated IP address, and any observed credential submissions should be treated as compromised. Ongoing re‑scans with VirusTotal and other sandbox services are recommended to capture any future changes in the domain's behavior.