io-en-us[.]host

This report details a malicious domain, io-en-us.host, identified as an impersonation threat. The site presented a page title claiming affiliation with "Aethernet | Planetary Neural Cybersecurity & Collective Defense Intelligence," while the available data indicates it impersonates the brand "across." The primary threat posed is brand impersonation, designed to deceive users into believing they are interacting with a legitimate entity, potentially leading to credential theft, malware distribution, or other fraudulent activities.

Technical evidence confirms the site's malicious nature. VirusTotal analysis shows 6 out of 95 vendors flagged the domain. It is registered with NameSilo, LLC, and was created on 2026-01-04. The domain resolves to IP address 104.21.76.127, hosted in the United States on AS13335 (Cloudflare, Inc.). No SSL certificate was detected. The domain's nameservers are rosa.ns.cloudflare.com and tom.ns.cloudflare.com. The site is present on 3 blocklists and has been flagged by alphaMountain.ai, Certego, CRDF, CyRadar, and Gridinsoft.

The current status of io-en-us.host is DOWN/OFFLINE. GridinSoft assigns a trust rating of 0 out of 100, and the DOM risk score is 10, indicating a very high risk. The combination of impersonation, low trust score, and vendor detections classifies this domain as a significant and active threat, despite its current offline status.