claim-usdai[.]com

This domain, claim-usdai.com, poses a brand impersonation threat designed to deceive users into believing they are interacting with a legitimate Google service. The site presents a page titled 'Google,' likely to harvest credentials or distribute malicious payloads under the guise of official Google authentication. The intent appears to be credential theft or unauthorized account access, targeting users who may mistake the domain for a legitimate Google login portal. Analysis indicates the domain was registered on November 21, 2025, through Dynadot LLC, a registrar frequently associated with abusive domains. It resolves to the IP address 142.250.181.228 and is flagged by 4 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, reinforcing its malicious classification. Infrastructure analysis reveals the use of Cloudflare and HTTP/3, which are often leveraged to obscure malicious activity and evade detection. Users who visited claim-usdai.com should immediately revoke any credentials entered on the site and monitor associated accounts for unauthorized activity. If financial or sensitive information was submitted, affected parties should enable multi-factor authentication on all accounts and consider reporting the incident to relevant fraud authorities. The domain is currently offline, but users should remain vigilant for similar impersonation attempts using slight variations of legitimate domain names.