aisi4-app[.]i4-app[.]top

Analysis indicates that the domain aisi4-app.i4-app.top was registered on September 28, 2025 through Gname.com Pte. Ltd. The authoritative nameservers a3.share-dns.com and b3.share-dns.net resolve the domain to the IPv4 address 172.245.67.31, which is hosted in the United States under ASN 36352 operated by HostPapa. The SSL certificate presented for the domain is issued to 172.245.67.50, indicating a mismatch between the certificate subject and the hostname, a common indicator of fraudulent infrastructure. The site returned a page title of “爱思助手”, but no further content analysis is available because the service is currently taken offline. Threat intelligence sources have classified the domain as a generic phishing vector.

Twelve out of ninety‑five VirusTotal scanners flagged the domain, and Google Safe Browsing lists it as delivering unwanted software. Gridinsoft assigned a trust score of zero out of one hundred, and the domain appears on a single public blocklist. PhishDestroy has explicitly blocked the domain, reinforcing the malicious assessment. The combination of a low trust score, multiple vendor detections, mismatched TLS certificate, and inclusion on phishing‑specific blocklists suggests a high probability that the domain was used to host credential‑stealing or malware‑distribution pages.

Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor for any outbound connections to the associated IP address, and consider adding the host to internal blacklists. Because the site is offline, active probing is not possible, but retrospective log analysis for past accesses to aisi4-app.i4-app.top or its IP can reveal compromised user activity. Threat hunters should also examine related subdomains under the i4-app.top zone and verify whether any similar naming patterns appear in recent phishing campaigns. Continuous re‑evaluation is advised in case the domain is re‑activated.