aviaanaccounting[.]net

This domain, aviaanaccounting.net, is identified as a credential phishing site designed to harvest login credentials under the guise of accounting services. Analysis indicates no direct association with a known brand, but the site mimics legitimate accounting platforms to deceive users into entering sensitive information. The threat type is classified as a fake login portal, with no evidence of crypto drainer or malware distribution at this time. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 46.224.230.97 and is secured with a Let's Encrypt SSL certificate. VirusTotal reports 3 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is referenced in a single AlienVault OTX threat intelligence pulse. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious nature. As of the latest assessment, aviaanaccounting.net has been taken offline, likely due to enforcement actions by security providers or hosting services. However, residual risk persists due to the potential for the threat actors to re-establish the domain or migrate to a new infrastructure. Organizations are advised to block the domain and its associated IP at the perimeter, monitor for related phishing campaigns, and educate users on recognizing fake login portals. Network logs should be reviewed for any prior connections to 46.224.230.97 or aviaanaccounting.net to identify compromised credentials.