airlinessg[.]com

airlinessg.com was registered on July 28 2026 through the entity Fewmoretaps OU d/b/a Trustname.com. The domain resolves to the public IP address 104.21.20.25 and uses Cloudflare DNS resolvers aliza.ns.cloudflare.com and jasper.ns.cloudflare.com. It appears on a single external blocklist and is currently listed as blocked by the PhishDestroy feed, indicating that at least one phishing mitigation service has observed malicious activity associated with the domain.

VirusTotal records show that the site was scanned by 91 antivirus and URL‑reputation engines, none of which raised a detection at the time of analysis. No additional telemetry such as SSL certificate details, HTTP response codes, page title, or content classification is available in the current intelligence set. Because the domain is less than a week old and remains hosted behind Cloudflare, attribution to a specific threat actor is not possible.

The limited observable indicators—recent registration, Cloudflare hosting, inclusion on a phishing blocklist, and the absence of detections in a large vendor set—suggest that the domain is being used for a phishing campaign, but the exact target, payload, or compromised credentials have not been identified. Defenders should add 104.21.20.25 and the domain name to proxy and DNS block policies, continue to monitor the domain for changes in reputation or content, and consider sharing any future observations with threat‑intel sharing platforms. Ongoing verification of the domain’s activity, including periodic re‑scans on VirusTotal and inspection of any retrieved web content, is recommended to determine whether the site remains malicious or evolves into a different threat vector.