aero-info[.]to

This domain aero-info.to is currently active and classified as a high‑risk brand‑impersonation phishing site. The authoritative nameservers aldo.ns.cloudflare.com and jewel.ns.cloudflare.com resolve the domain to IP 172.67.212.147, an address owned by Cloudflare (AS13335) located in the United States. The site presents a 301 redirect and serves a TLS certificate issued by Google Trust Services under the WE1 profile. The page title “Aerodrome Finance Review 2026 — Leading DEX on Base” suggests an attempt to lure users interested in decentralized finance on the Base network. VirusTotal has recorded four detections out of ninety‑one scanners, and the domain appears on three security blocklists. Registration was performed through the Government of the Kingdom of Tonga on 24 June 2026, indicating a recent creation date. Infrastructure analysis shows use of Cloudflare Browser Insights and HTTP/3, typical of fastly‑served malicious sites. Uncertainties remain regarding the exact phishing payload and whether the site hosts credential‑stealing forms, as no page content has been examined. Defenders should block aero‑info.to at perimeter firewalls and DNS filters, monitor outbound connections to the associated Cloudflare IP range, and update intrusion‑detection signatures to flag HTTP 301 responses from this host. Continued observation of the blocklist status and any emerging VirusTotal detections is recommended.