airsolproject[.]xyz

This domain, airsolproject.xyz, is currently under investigation for operating as a fraudulent airline booking portal designed to harvest credit card details and personal information from victims. Analysis indicates the site employs generic phishing tactics without association to a specific drainer kit, though it mimics legitimate airline reservation systems through cloned interfaces and fabricated flight deals. The infrastructure shows no direct ties to known brand impersonation campaigns, but the fraudulent nature is evident through deceptive pricing and urgency triggers embedded in the site's content. Infrastructure analysis reveals the following technical indicators: VirusTotal detection score stands at 0/95, meaning no security vendors have flagged the domain despite active malicious use. The domain was registered through OwnRegistrar, Inc. on June 30, 2026, a future date that suggests potential registrar manipulation or incorrect WHOIS records. It resolves to IP address 172.67.165.169, a Cloudflare proxy endpoint commonly used to conceal origin servers. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy while the domain remains unlisted on Google Safe Browsing and other major blocklists. Current status remains active with no takedown actions observed. The absence of detections despite clear fraudulent activity poses a significant risk to users encountering the site through malvertising or search engine poisoning. Response actions should include immediate submission to blocklist providers, registrar abuse reporting, and Cloudflare's trust and safety team. Users are advised to verify airline booking portals through official channels only, as this domain demonstrates how attackers exploit legitimate-looking infrastructure to bypass initial scrutiny. The future creation date in WHOIS records warrants further investigation into potential registrar compromise or domain spoofing techniques.