aeroglobalswiftdelivery[.]com[.]trinityexpressdelivery[.]com

The domain aeroglobalswiftdelivery.com.trinityexpressdelivery.com is a phishing site involved in brand impersonation targeting Google. It is associated with a shipping scam and is currently taken offline. This domain is not safe and poses a risk of fraud by mimicking a trusted brand to deceive users. There is no drainer kit linked to this domain, but its use in phishing schemes makes it a threat under investigation.

aeroglobalswiftdelivery.com.trinityexpressdelivery.com was registered on June 09, 2025, through Cosmotown, Inc. It resolves to the IP address 163.61.188.89 located in the US under AS153568 NEW DHAKA HARDWARE. The domain appears on one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. VirusTotal analysis shows 0 of 95 vendors detect it as malicious, and Google Safe Browsing has not flagged it. The domain has no SSL certificate, and its HTTP status returns 429. The observed page title was Aero Global Swift Delivery | Homepage, with nameservers ns1.capricloud.com and ns2.capricloud.com.

Users who may have interacted with aeroglobalswiftdelivery.com.trinityexpressdelivery.com should consider this domain unsafe and take precautionary measures. Since this is a credential phishing threat impersonating Google, affected individuals should change their passwords immediately, enable two-factor authentication, and monitor accounts for suspicious activity. To assist in mitigation efforts, phishing incidents involving this domain should be reported to security blocklists like PhishDestroy and to relevant internet service providers or cybersecurity authorities.