Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
aerocdrome.finance shows high-risk / scam indicators.
| What this site appears to be | The page is a Cloudflare interstitial warning that the requested website has been reported for potential phishing, with a 'Learn More' link and an 'Ignore & Proceed' option. The target site's actual content is not included, so its purpose and legitimacy cannot be assessed. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 12 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The domain aerocdrome.finance, which presents itself as a finance-sector web property, did not display its own content when analysed. A Cloudflare "Suspected Phishing" interstitial stated that the site "has been reported for potential phishing" and offered "Learn More" and "Ignore & Proceed" options. Because the interstitial replaced all service content, the site's products, operator and business model could not be observed. The only visible purpose is a warning that the site may try to steal sensitive information by posing as a safe source.
Scam/Impersonation Risk
The convergence of signals here is serious and points one way. Multiple major security vendors currently flag the domain as malicious, and it is blacklisted by external reputation sources. The page-level evidence is consistent with those listings, because the interstitial itself reports a phishing concern on the domain. The domain was registered only weeks ago, which fits the profile of short-lived, disposable infrastructure. Its sandbox traffic shows a heavy share of requests to external destinations, repeated browser console errors, and a large burst of page changes after interaction. The final destination also did not match the entry point, so the network behaviour is suspicious. No brand impersonation or conflicting legal identities were identified, but the blacklist listings alone are decisive. Sensitive interaction with this domain, including login, credential entry and any financial transaction, is unsafe. Evidence:
- Domain registered September 2026 (~0.07 years, about 24 days old) at the time of analysis.
- The homepage capture was a "Suspected Phishing" warning page, with no login form, wallet prompt or brand content visible.
- Sandbox runs on the homepage recorded a final-destination mismatch, 17 console errors and a high external-request share (about 97% at peak).
- Several reputable security vendors independently classify the domain as malicious, and a high-severity external threat listing is active.
Regulatory Verification Notes
No legal, terms, privacy or about pages could be assessed, because the only captured page was the warning interstitial. No licence or registration claim is attached to the site, and no regulator confirms it. Real-world operator identity remains unverified, and ownership is opaque. This is a limit on verification, not evidence of wrongdoing, and the threat listings carry the cautionary conclusion. No broker-reputation entry matched the domain. A valid transport-encryption certificate is present, but it is only a basic domain-validation certificate and confirms nothing about the operator's legitimacy. Evidence:
- The TLS certificate is domain-validated (DV), issued by YE2, valid to 2026-12-23.
- The domain is registered through NICENIC International Group Co., Limited, with registration running to 2027-09-24.
- The domain is served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Nothing needs to be verified before deciding, because the threat listings alone support staying away. Anyone who still needs to evaluate the domain should do so only in an isolated, non-production environment with no credentials or wallets. They should confirm the official domain of any service they believe this one represents through an independent, offline route, and compare it character by character with the address they were given. Anyone who reached this domain through an unsolicited message, advertisement or social post should treat that source as suspect and report it. Official support and contact channels should be taken from the genuine provider's own known site, never from a link or message that led here. Evidence:
- The homepage presents a phishing-warning interstitial rather than any verifiable service or contact page.
- Threat listings from several security vendors are current for this domain.
- The domain's very recent registration means it has no established history that could corroborate a claimed identity.
Summary Verdict
The domain presents an elevated, clearly cautionary risk posture. Current external threat listings, a phishing warning on the homepage, suspicious network behaviour and a very young registration all converge on the same conclusion. Legitimacy cannot be inferred from any technical hygiene the site shows. The assessment is decisive on the reputation evidence and does not depend on any unverifiable ownership detail.
Infrastructure Integrity
The domain sits behind Cloudflare's CDN and web-application firewall. All observed addresses are edge servers, and the origin server was not observable. This is a mitigating factor only. It shows the site uses mainstream protective infrastructure, but it cannot offset the active threat listings and offers no proof of legitimacy. Edge-only visibility also prevents independent hosting verification.
Closing Assessment
Do not log in, connect a wallet, enter personal or payment details, or download anything from this domain. Anyone who already interacted with it should change affected passwords, revoke any wallet permissions granted, and report the incident to their provider.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, page content, behaviour in a sandbox.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of aerocdrome.finance.
- The request stayed on aerocdrome.finance. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-24. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::6815:3a08 |
| Name servers | harley.ns.cloudflare.com, laylah.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-23 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-24 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 12 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about aerocdrome.finance at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.