aerodrome[.]com[.]br

The domain aerodrome.com.br was registered on February 21, 2026 and is currently resolved to the IP address 69.6.213.237, which is geolocated in Brazil and belongs to ASN 31898 (Oracle Corporation). The authoritative nameservers are ns00025.hostgator.com.br and ns00024.hostgator.com.br, indicating hosting on a common web‑hosting platform. The site presents an HTTP 403 response with the page title "403 - Acesso negado" and serves an SSL certificate issued by Let’s Encrypt (R13). Infrastructure fingerprints show the presence of both Nginx and Apache HTTP Server alongside the jQuery library, suggesting a multi‑component web stack. Security telemetry records a single detection by a VirusTotal vendor out of 93 scanners, a trust score of 0 out of 100, and inclusion on one external phishing blocklist. The domain is categorized as generic_phishing with a high risk rating and remains active. Analysis indicates that the domain is being used for phishing attempts, though the specific lure or credential‑capture page has not been publicly observed. Defenders should block the domain and its resolved IP at perimeter firewalls and DNS filtering solutions, monitor for any traffic to the associated ASN, and incorporate the observed TLS fingerprint and server headers into intrusion detection signatures. Continuous re‑evaluation is advised in case additional malicious payloads or victim targeting details emerge.