faq-aerodrome-slipstream-en-us[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation targeting Aerodrome. It was created on October 17, 2025, and remains active as of July 12, 2026. The page title references aviation slipstream hazards and safety, which is unrelated to the actual Aerodrome brand—likely a decoy to evade initial scrutiny. Infrastructure analysis shows the domain resolves to IP 172.66.44.100, hosted by Cloudflare, Inc. (AS13335) in the United States. The SSL certificate is issued by Google Trust Services (WE1), and nameservers are malcolm.ns.cloudflare.com and olivia.ns.cloudflare.com. Technologies detected include HSTS, Cloudflare, and HTTP/3. VirusTotal reports 1 of 93 security vendors flagging this domain, and it appears on one security blocklist (PhishDestroy). Gridinsoft trust score is 0/100, indicating strong distrust. The domain is registered through Cloudflare, Inc., and returns HTTP status 200. Defenders should treat this as an active phishing threat: block the domain at network level, monitor for similar .pages.dev subdomains, and investigate any user interactions with the site. The exact phishing kit or landing page content has not been analysed, so further inspection via sandboxed browsing or screenshot capture is recommended to confirm the attack vector. No additional intelligence on associated email addresses, phone numbers, or cryptocurrency wallets is available at this time.