aearodrorne[.]com

Analysis of the domain aearodrorne.com indicates it was a brand-impersonation phishing site targeting Aerodrome Finance, operational until recently. The domain was registered on February 21, 2026, and resolved to IP address 66.63.187.97, hosted on AS36352 (HostPapa) in the United States. The site's page title was explicitly set to 'Aerodrome Finance,' aligning with the identified scam type of brand impersonation. At the time of assessment, the domain was offline, though it had been flagged by one security blocklist and appeared in a single AlienVault OTX threat intelligence pulse.

VirusTotal records show 14 out of 93 security vendors marked the domain as malicious, though the specific nature of the threat—such as credential harvesting, token theft, or other attack vectors—remains unconfirmed due to the lack of active page analysis. The SSL certificate was issued under the R10 root, which is not inherently suspicious but provides no additional trust indicators. GridinSoft assigned a trust score of 0/100, reinforcing its classification as high-risk.

Defenders should treat this domain as a confirmed phishing indicator, particularly in environments where Aerodrome Finance is relevant. Network-level blocking is recommended, and retrospective log analysis should be conducted to identify any prior interactions with this domain. Further investigation into associated infrastructure, such as hosting provider patterns or related domains, may uncover additional threats.