aerodrome-pharos[.]com

The domain aerodrome-pharos.com is identified as a potential phishing site. It is associated with Aerodrome Finance, a brand that may be used to lure unsuspecting users into providing sensitive information. No specific drainer kit has been detected on this domain, but the page title and technical indicators suggest a high likelihood of malicious activity.

Infrastructure analysis reveals that aerodrome-pharos.com has a VirusTotal score of 17/95, indicating that a significant number of security vendors have flagged it as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.96.3. It was created on April 28, 2026, which is a relatively recent creation date, often associated with new phishing campaigns. The domain is also flagged by Google Safe Browsing for SOCIAL_ENGINEERING and appears on five security blocklists, further confirming its high-risk status. The site employs technologies such as HSTS, Cloudflare Browser Insights, and Cloudflare, which can mask its true nature and enhance its credibility.

The domain is currently active and poses a high risk to users. Immediate response actions include avoiding interaction with the site and ensuring that security software and browser extensions are up to date. The remaining risk is significant, as the domain's high detection rate and recent creation suggest ongoing malicious activity. Users should report any suspicious activity to their security teams and avoid clicking on links or entering personal information on this site.