Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
aerodrome-claim[.]com
“Even geduld...”
aerodrome-claim.com — पहुंच योग्य · पहुंच प्रतिबंधित (HTTP 403). ब्रांड प्रतिरूपण: Aerodrome; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 3/93 (Gridinsoft, Seclookup, SOCRadar); URLQuery 2 alerts; Spamhaus DBL_PHISH; 3 external blocklist matches (MetaMask, SEAL, Enkrypt); PhishDestroy score 74/100. रजिस्ट्रार: NiceNIC.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
As of July 25, 2026, the domain aerodrome-claim.com has been flagged as a crypto scam impersonating the brand aerodrome. The domain was created on February 21, 2026, and has since been taken offline. However, the short lifespan and the nature of the scam suggest a clear attempt to deceive users into revealing sensitive information or making unauthorized transactions. The domain is currently resolved to the IP address 172.67.181.55, which is associated with US-based Cloudflare, Inc. (AS13335).
It utilizes Cloudflare's services, including Cloudflare Browser Insights and HTTP/3, which may have been employed to mask the true nature of the site and enhance its perceived legitimacy. The SSL certificate for the domain is issued by Google Trust Services, providing an additional layer of apparent trust. The page title, 'Even geduld...', could be a placeholder or intentionally vague to avoid immediate detection. The domain has been listed on four security blocklists, including PhishDestroy, MetaMask, SEAL, and Enkrypt, indicating a consensus among security experts about its malicious intent.
The HTTP status code 403 further suggests that the site is either actively blocking access or has been intentionally taken down to evade scrutiny. Given the elevated risk level and the involvement of multiple security vendors, defenders are advised to monitor for any signs of the domain being reactivated and to enhance filtering and alerting mechanisms for related threats. The domain's registration through NiceNIC International Group Co., Limited should also be noted as this registrar may be a point of further investigation or a potential avenue for additional domains used in similar scams.
नेटवर्क सुरक्षा इंटेलिजेंस Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | aerodrome-claim.com |
malicious | Sinkholed |
| DNS4EU | aerodrome-claim.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-17 02:39:08 UTC
तकनीकें · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
PD-20260211-62A2A9 Recipient: abuse@nicenic.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।