airwayld[.]com

Analysis indicates that airwayld.com was registered on 9 April 2026 through TuringSign Inc. d/b/a Cosmotown and is currently serving HTTP 200 responses from the IP 163.61.188.7, which geolocates to the United States (MIT). The site presents a page titled “AirWay Logistics Delivery – Home” and employs front‑end frameworks including Bootstrap, jQuery, jQuery UI, LiteSpeed, Tiny Slider, Swiper, OWL Carousel, and JivoChat. A Let’s Encrypt certificate (YR1) is active, and the domain’s MX record points to airwayld.com itself. Reputation metrics are poor: Gridinsoft assigns a trust score of 20 / 100, the domain appears on a single security blocklist, and three of ninety‑one VirusTotal scanners have flagged it. AlienVault OTX lists the domain in two threat‑intel pulses, and PhishDestroy has already blocked it. The intelligence points to a high‑risk brand‑impersonation phishing campaign targeting logistics‑related communications. No additional payload or credential‑capture details have been observed, so the full attack vector remains unclear. Defenders should immediately deny or sinkhole traffic to airwayld.com, add the address 163.61.188.7 to network block lists, monitor for similar front‑end technology footprints, and continue to track any new detections in threat‑intel feeds.