aerlyxsa[.]digital

The domain aerlyxsa.digital, created on 22 February 2026 and registered through Dynadot LLC, is currently active and serves a page titled “Schweizer Vignette – Aerlyxsa Digital”. DNS resolution points to the IP address 188.114.96.3, which is assigned to Cloudflare, Inc. (AS13335) and geolocated to the United States. The domain is protected by a Google Trust Services certificate issued under the WE1 intermediate, and HTTP requests return a 200 OK status over HTTP/3, confirming that the site is reachable and functional.

Infrastructure analysis shows the domain uses Cloudflare’s name servers bruce.ns.cloudflare.com and kehlani.ns.cloudflare.com, indicating reliance on Cloudflare’s edge network for delivery and obscuring of the origin server. Reputation metrics are uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist that is actively enforced by PhishDestroy. VirusTotal scans report that three of ninety‑five security vendors flagged the domain, reinforcing the suspicion of malicious activity.

While the exact phishing payload or credential‑harvesting mechanism has not been publicly disclosed, the combination of a high‑risk classification, low trust score, active blocklist entry, and multiple vendor detections suggests a deliberate phishing campaign. Defenders should block aerlyxsa.digital at the DNS and proxy layers, consider denying traffic to its hosting IP 188.114.96.3, and monitor for any related indicators of compromise that reference the observed page title or Cloudflare name servers. Continuous re‑evaluation is advised, as further analysis may reveal additional malicious components or victim targeting details.