aerodeliveryexpress[.]com

AeroDeliveryExpress.com poses as a logistics company, leveraging its deceptive appearance to conduct phishing attacks. Despite being flagged by only 1 out of 91 VirusTotal vendors, PhishDestroy has identified this domain as malicious and added it to its blocklist. The domain, registered with ENOM, INC., is hosted on IP 194.36.191.196 in the Netherlands, under Host Sailor Ltd.

The site uses a Let's Encrypt SSL certificate, which might lend it an air of legitimacy to unsuspecting users. However, its platform risk score of 71 out of 100 indicates a significant threat level. The abuse score is relatively low at 19 out of 100, suggesting it is still early in its lifecycle, potentially increasing its effectiveness in phishing campaigns.

PhishDestroy's early detection highlights the domain's freshness, as it was first spotted on June 19, 2026, only a few months after its creation in September 2025. This early identification is crucial, as phishing domains often exploit the gap between registration and widespread detection by antivirus databases. The domain's active status and its presence on a public blocklist underscore the need for awareness and caution among potential targets.