rewokeaero[.]digital

rewokeaero.digital was registered on August 03, 2026 through the registrar Spaceship, Inc. The domain is delegated to Cloudflare name servers fatima.ns.cloudflare.com and pedro.ns.cloudflare.com and resolves to the IP address 188.114.97.3. Within two days of creation the domain appeared on a security blocklist and was subsequently flagged by the PhishDestroy feed as a generic phishing site. VirusTotal has recorded 91 vendor scans; none of the scanners returned a positive detection, which does not constitute evidence of benign behavior. The domain remains active as of the report date (August 05, 2026) and continues to resolve to the same IP, indicating that the underlying hosting infrastructure is still operational.

No additional metadata such as SSL certificate details, HTTP response codes, page title, or threat‑actor kit information is currently available in the public feeds. The limited evidence suggests that the domain is being used for phishing campaigns, but the exact target or payload has not been disclosed. Defenders should consider adding 188.114.97.3 and rewokeaero.digital to network deny lists, monitor DNS queries for the domain, and apply outbound filtering rules that block communications with the identified IP.

Continuous re‑scanning on VirusTotal and other multi‑engine platforms is recommended to capture any future malicious payloads that may be uploaded. Organizations using phishing detection platforms should also ingest the PhishDestroy indicator to improve early warning. Ongoing observation of the Cloudflare name servers for any additional domains that resolve to the same IP may reveal further infrastructure used by the same campaign.