# view-aerodrome.xyz — MALICIOUS

> view-aerodrome.xyz is a live crypto drainer domain flagged by 5/95 VirusTotal vendors. Immediate block recommended to prevent asset theft.

## Summary
PhishDestroy identifies view-aerodrome.xyz as an active crypto drainer domain deployed to siphon cryptocurrency assets from unwitting users. The domain mimics legitimate aerodrome or DeFi-related services, luring victims into connecting wallets or signing malicious transactions that authorize fund transfers to attacker-controlled addresses.

This domain was flagged by 5 of 95 VirusTotal security vendors, operates on IP 188.114.97.3, and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 31, 2026. It holds a valid Let’s Encrypt SSL certificate, indicating an attempt to appear trustworthy. The low VT detection rate highlights the importance of proactive network and endpoint monitoring.

With active status confirmed, immediate network-level blocking and user awareness campaigns are advised. While the domain’s recent creation and low blocklist presence suggest limited exposure, the presence of a crypto drainer kit and live infrastructure elevates risk. Users should avoid interaction and organizations should update firewall rules, DNS blocklists, and endpoint protections using the indicators provided.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-31 12:53:27
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/view-aerodrome.xyz
- PhishDestroy: https://phishdestroy.io/domain/view-aerodrome.xyz/
- LLM endpoint: https://phishdestroy.io/domain/view-aerodrome.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/view-aerodrome.xyz/
Last updated: 2026-04-01