fundai[.]online

PhishDestroy identifies fundai.online as an active cryptocurrency phishing domain under investigation for fraudulent activities. The domain exhibits no affiliation with legitimate financial platforms and lacks verifiable branding or drainer kit signatures. Its operational purpose appears designed to deceive users into divulging sensitive wallet credentials or transferring digital assets under false pretenses. The absence of recognized cryptocurrency branding or established trust indicators suggests a deliberate impersonation strategy targeting decentralized finance (DeFi) and blockchain enthusiasts.

Technical indicators confirm fundai.online as a high-risk endpoint. The domain was created on September 03, 2024, and resolves to IP 172.67.215.124 via Gname.com Pte. Ltd. As of current scans, VirusTotal reports 10/95 detections, indicating no antivirus or security vendor has flagged the domain yet. Google Safe Browsing (GSB) has not blacklisted the domain, and no third-party threat intelligence feeds list this IP or domain in their blocklists. The SSL certificate, issued by Google Trust Services, provides a false sense of legitimacy but does not validate the domain’s trustworthiness given its recent creation and suspicious activity.

This domain remains active with an under_investigation status, posing an ongoing risk to cryptocurrency users. PhishDestroy recommends immediate caution: avoid interacting with fundai.online, verify all URLs before inputting credentials, and use browser protection tools or security extensions. Users who suspect exposure should revoke any shared credentials and monitor wallet transactions for unauthorized activity. The remaining risk is classified as medium-to-high due to the domain’s freshness, lack of detection, and potential for rapid escalation as more victims report incidents.