# torexianai.net — MALICIOUS

> Explore the risks of torexianai.net, flagged for social engineering. Learn why this domain is under investigation and what to watch out for.

## Summary
PhishDestroy has identified torexianai.net as a potentially malicious domain associated with generic phishing activities. Classified as under investigation, the domain raises concerns due to its recent creation and suspicious behavior patterns linked with social engineering tactics.

Technically, torexianai.net resolves to the IP address 188.114.96.3 and was registered through PDR Ltd., a common registrar often exploited by threat actors. Despite this, VirusTotal scans show zero detections among 95 security vendors, indicating it has not yet been flagged by mainstream antivirus engines. However, Google Safe Browsing has marked the domain for social engineering, signaling an elevated risk. This discrepancy emphasizes the need for ongoing monitoring.

Currently active and under scrutiny, torexianai.net remains a domain of interest to cybersecurity analysts. PhishDestroy recommends caution when encountering this domain and advises organizations to watch for phishing attempts linked to it, as further malicious activity or evidence may emerge with continued investigation.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-08 13:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["iris.ns.cloudflare.com", "jimmy.ns.cloudflare.com"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 13 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "SOCRadar", "Sophos"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ccd4a-470d-72e3-ad35-2516e8c97571.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/137838da-bf30-4d30-bf3d-0cd778e04bb1
- Wayback Machine: https://web.archive.org/web/https://torexianai.net
- PhishDestroy: https://phishdestroy.io/domain/torexianai.net/
- LLM endpoint: https://phishdestroy.io/domain/torexianai.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/torexianai.net/
Last updated: 2026-03-19