usdai[.]network
“Buy | USD AI”
The domain usdai.network is a generic phishing site posing a high-risk threat. It does not impersonate a specific brand or employ a known drainer kit but operates as a broad phishing platform designed to deceive users into disclosing sensitive information or transferring assets. As of the latest verification, usdai.network has been taken offline, though its prior activity remains a concern for potential victims.
Technical indicators confirm the malicious nature of usdai.network. The domain is flagged by 10 of 95 VirusTotal security vendors, including alphaMountain.ai, BitDefender, and CRDF. It appears on 5 security blocklists, specifically PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. The domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, hosted by Cloudflare, Inc. (AS13335) in the US. No SSL certificate is present, and the observed page title was 'Buy | USD AI'. Nameservers are toby.ns.cloudflare.com and yolanda.ns.cloudflare.com. Gridinsoft assigns the domain a trust score of 0/100.
Users who may have interacted with usdai.network should take immediate safety steps. If credentials or login details were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized activity and report any fraudulent transactions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims of phishing scams can also file complaints with organizations such as the FBI’s Internet Crime Complaint Center (IC3) or their regional cybercrime unit.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive