aerix-tsg[.]com

The domain aerix-tsg.com has been confirmed as a phishing site engaged in brand impersonation targeting Aerix. Analysis indicates the site was designed to deceive users into believing it was an official Aerix platform, likely for credential harvesting or fraudulent transactions. The domain is currently offline, though prior activity suggests a focus on exploiting trust in the Aerix brand. Infrastructure analysis reveals the domain was registered on June 03, 2026, through GoDaddy.com, LLC, an atypical creation date that may indicate an attempt to evade detection. It resolved to the IP address 34.8.77.192 and was flagged by 15 of 95 security vendors on VirusTotal, reflecting a moderate but concerning detection rate. The domain appeared on one security blocklist, further corroborating its malicious classification. The SSL certificate was issued by Google Trust Services, and the site employed multiple technologies, including Google Cloud, Nginx, Alibaba Cloud Object Storage Service, and Facebook Pixel, suggesting an effort to mimic legitimate web infrastructure. Current status indicates the domain has been taken offline, likely due to enforcement actions or abandonment by the threat actor. However, the infrastructure and registration details remain relevant for historical analysis. Organizations and users are advised to block the domain and its associated IP address (34.8.77.192) at the network level. Security teams should monitor for similar domains registered through GoDaddy with future creation dates, as this may indicate a pattern of evasion. End-users should verify the authenticity of any Aerix-related communications or websites by cross-referencing official channels and avoiding interaction with domains created outside expected timeframes.