ai[.]predicts[.]top

Analysis of the domain ai.predicts.top indicates active phishing infrastructure under investigation as of July 12, 2026. The domain resolves to 188.114.97.3, an IP address assigned to AS13335 (Cloudflare, Inc.) located in the United States. Nameservers lamar.ns.cloudflare.com and roxy.ns.cloudflare.com further confirm Cloudflare as the hosting and DNS provider. Registration occurred on February 27, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with abusive domains. Technical indicators reveal the use of Node.js and Express on the server side, alongside Cloudflare-specific technologies including HSTS, Browser Insights, and HTTP/3. The SSL certificate is issued by Let’s Encrypt (serial E8), a common choice for both legitimate and malicious sites. The domain currently returns an HTTP 403 status with the page title 'Just a moment...', a response often generated by Cloudflare’s security or bot mitigation systems. This may indicate the site is actively filtering traffic or concealing its content from automated analysis. Detection data remains limited: the domain appears on one security blocklist, while 93 vendors scanned it without flagging it as malicious. The absence of detections does not confirm safety, particularly given the domain’s recent registration and use of anonymizing infrastructure. Gridinsoft assigns a trust score of 0/100, reflecting high risk based on infrastructure and behavioral patterns. Defenders should treat ai.predicts.top as suspicious pending further analysis. The domain’s reliance on Cloudflare, recent registration, and lack of transparency in content delivery align with known phishing tactics. Network-level blocking or monitoring is recommended until the threat classification is updated.