iaero-app[.]pages[.]dev

Analysis of the domain iaero-app.pages.dev indicates it is actively impersonating the iAERO Protocol, a liquid staking platform, as part of a fake exchange scam. The domain was registered on March 28, 2026, and remains operational as of July 12, 2026, resolving to IP address 188.114.96.3, hosted on Cloudflare infrastructure in Canada. The page title explicitly displays 'iAERO Protocol - Liquid Staking,' aligning with the reported scam type of a fake exchange. Technical indicators include HTTP/3 support, HSTS enforcement, and a valid SSL certificate issued by Google Trust Services (WE1), which may contribute to perceived legitimacy. The domain is flagged by 3 of 94 security vendors on VirusTotal and appears on one security blocklist, specifically PhishDestroy. Nameservers koa.ns.cloudflare.com and luciane.ns.cloudflare.com further confirm Cloudflare as the hosting provider. While the domain exhibits characteristics typical of phishing infrastructure, the exact content and functionality of the site have not been analyzed. Defenders should treat this domain as high-risk, prioritize blocking at the DNS or network level, and monitor for associated indicators such as the resolving IP and SSL certificate thumbprint. Given the domain's recent creation and active status, further investigation into user interactions or credential harvesting attempts is recommended.