aerodromeauthorization[.]com
Pemeriksaan phishing dan keamanan aerodromeauthorization.com
“SECURITY CHECK”
aerodromeauthorization.com — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Aerodrome; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); 4 external blocklist matches; PhishDestroy score 85/100. Registrar: Ultahost.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain aerodromeauthorization.com is currently active and classified as a high‑risk brand‑impersonation operation targeting the Aerodrome brand. The site presents a page titled “SECURITY CHECK”, which is commonly used in credential‑harvesting flows. The domain was registered on August 17 2025 through Ultahost, Inc., within the typical lifecycle of malicious infrastructure.
Infrastructure analysis shows the domain resolves to IP address 82.25.35.148, which belongs to AS21859 operated by Zenlayer Inc. The IP geolocates to the United Kingdom. DNS resolution is served by Cloudflare nameservers addilyn.ns.cloudflare.com and rudy.ns.cloudflare.com, suggesting the attackers are leveraging Cloudflare’s CDN to hide origin infrastructure. No TLS certificate is associated with the domain, and the HTTP response is a 302 redirect, indicating active redirection behavior.
Reputation services flag the domain as malicious: Scamadviser assigns a trust score of 26 / 100, Gridinsoft reports 0 / 100, and the domain appears on five security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal indicates that 1 of 95 security vendors has flagged the domain, providing limited but corroborating evidence. The combination of a brand‑impersonation label, lack of encryption, and redirection behavior aligns with typical credential‑stealing campaigns.
Defenders should treat aerodromeauthorization.com as hostile. Immediate actions include adding the domain and its resolving IP to block lists, configuring DNS sinks or firewall rules to prevent connection attempts, and monitoring for similar registration patterns. Because the exact content beyond the page title has not been publicly disclosed, analysts should continue to sample the site for potential payloads or credential collection mechanisms. Ongoing observation of the associated Cloudflare nameservers may reveal additional malicious domains that share the same infrastructure.
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive