register-aerodrome[.]info

Analysis of register-aerodrome.info shows a domain that was created on August 05, 2026 and is currently active. The registrar listed is NICENIC INTERNATIONAL GROUP CO., LIMITED and the authoritative nameservers are anna.ns.cloudflare.com and curt.ns.cloudflare.com, indicating the domain is hosted on Cloudflare’s network. DNS resolution points to IP address 104.21.30.122, which belongs to Cloudflare’s edge infrastructure and does not reveal a direct backend host, a pattern often used by threat actors to hide the true location of malicious services.

The domain is already flagged on three security blocklists and has been blocked by commercial phishing mitigation services including PhishDestroy, MetaMask, and SEAL, suggesting that it is being used in a phishing campaign. VirusTotal reports that the domain was examined by 91 scanning vendors, none of which raised a detection at the time of the scan; however, the absence of detections does not constitute evidence of safety, especially given the other corroborating indicators. No public information about the site’s page title, SSL certificate details, HTTP response codes, or content has been released, leaving the exact payload or credential‑harvesting mechanism unknown.

Defenders should treat the domain as high‑risk, enforce block‑listing at network perimeter and DNS filtering layers, and monitor for any future activity associated with the Cloudflare IP address. Continuous re‑evaluation is advised should additional telemetry such as page content, certificate fingerprints, or user‑reporting emerge.