auth-aerodrome-slipstream-io-us[.]pages[.]dev

The domain auth-aerodrome-slipstream-io-us.pages.dev is actively serving HTTP 200 responses and presents a page titled “Aerodrome Slipstream: Causes, Effects, and Safety Measures.” Infrastructure analysis shows the domain resolves to 172.66.47.118, which is owned by Cloudflare (AS13335) and is geolocated to the United States. The registration, performed through Cloudflare, Inc., occurred on 17 October 2025 and uses the Cloudflare nameservers lloyd.ns.cloudflare.com and sara.ns.cloudflare.com. TLS is provided by Google Trust Services / WE1 and the site enforces HSTS and HTTP/3. Reputation data indicates a Gridinsoft trust score of 0 / 100 and that three of ninety‑three VirusTotal scanners have flagged the domain. The site is listed on one security blocklist and is currently blocked by PhishDestroy. The brand target is identified as “aerodrome,” and the domain is classified as a brand‑impersonation scam. No additional content analysis is available beyond the page title; therefore, the exact malicious payload or credential‑harvesting mechanisms remain unknown. Defenders should treat the domain as high‑risk, add it to deny‑list controls, monitor DNS queries for the associated IP address, and consider broader threat‑intel sharing of the observed indicators of compromise.