airconalgarve[.]com

This domain, airconalgarve.com, is currently active and has been identified as a generic phishing infrastructure. The registrar is TUCOWS.COM, CO, with the domain created on 21 February 2010. DNS resolution points to the IPv4 address 204.11.59.228 and the authoritative name servers are ns1.bh-9.webhostbox.net and ns2.bh-9.webhostbox.net. The site uses a Let’s Encrypt certificate (R13), indicating the presence of HTTPS but offering no indication of legitimacy. VirusTotal scans have recorded five detections out of ninety‑one security vendors, confirming that multiple threat‑analysis engines flag the domain as malicious. AlienVault OTX references the domain in four separate threat‑intelligence pulses, reinforcing its association with phishing campaigns. No public page content, landing‑page behavior, or targeted brand information has been disclosed, so the exact phishing vector remains uncertain. Defenders should consider adding airconalgarve.com to block lists, monitor DNS queries for the associated IP address, and apply sink‑hole or network‑level filtering to prevent client connections. Continuous observation is advised to detect any changes in hosting, certificate renewal, or new threat‑intel references.