aeronacelogistics[.]com

The domain aeronacelogistics.com was registered on February 21, 2026 through HOSTINGER operations, UAB, and resolves to the IP address 107.173.193.235, which is advertised as belonging to a US‑based hosting provider (AS36352 HostPapa). The site presents a single page whose title reads “Checking your browser before accessing. Just a moment…”, and it returns an HTTP 200 response while leveraging Hostinger’s CDN and HTTP/3. The TLS certificate is issued by Let’s Encrypt (R13), indicating a valid, publicly trusted encryption layer.

Threat intelligence sources have flagged the domain as malicious. VirusTotal reports that one out of ninety‑five scanned security vendors marked the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100. The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy feed. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, both associated with generic parking services, which is a common pattern for transient phishing infrastructure.

While the available data confirms the presence of a suspicious landing page and multiple independent detections, the specific phishing campaign details remain unknown. No information has been disclosed regarding the targeted brand, credential‑stealing kit, or the broader command‑and‑control infrastructure. Consequently, analysts cannot yet attribute the activity to a particular threat actor or confirm the exact payload delivered to victims.

Defenders should treat aeronacelogistics.com as high‑risk. Immediate actions include adding the domain and its resolving IP (107.173.193.235) to blocklists at perimeter firewalls and DNS filtering solutions, monitoring network traffic for outbound connections to the host, and employing URL reputation services to intercept future attempts. Continuous re‑evaluation is advised, as additional indicators may emerge from ongoing threat‑intel feeds.