oxidefai[.]com
“OxideFAI – AI Trading”
oxidefai.com — Contenu indisponible (HTTP 502). Type d'arnaque : Investment Scam. Résumé des preuves: VirusTotal 4/91 (alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); URLQuery 1 det.; PhishDestroy score 65/100. Bureau d’enregistrement: Ultahost.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
PhishDestroy identifies oxidefai.com as an active generic phishing domain impersonating AI Trading services, suspected to host a crypto drainer kit designed to siphon cryptocurrency assets. The page, titled OxideFAI – AI Trading, leverages a deceptive front-end built with Bootstrap, Material Design Lite, Leaflet, and particles.js, suggesting a polished but malicious interface. The backend operates on a Microsoft ASP.NET stack hosted via IIS on a Windows Server, with SSL provided by Let’s Encrypt, indicating an attempt to appear legitimate while concealing malicious intent.
Technical indicators reveal a highly evasive setup: oxidefai.com boasts a current VirusTotal detection score of 0/95, remains unflagged by Google Safe Browsing, and shows no presence on major blocklists despite its recent creation on September 16, 2025. The domain is registered through Ultahost, Inc. and resolves to IP address 212.224.107.10, which has not yet been widely blacklisted. This combination of fresh registration, low detection rates, and sophisticated front-end frameworks highlights a deliberate effort to evade early-stage detection mechanisms.
Currently, oxidefai.com remains active and under investigation, with no immediate takedown action reported. Users are advised to avoid interaction and verify any AI Trading-related links using PhishDestroy’s verification tools. While the immediate risk is classified as under investigation, the lack of current detections suggests potential for rapid escalation. Remaining risk hinges on further analysis and blocklist propagation—organizations should monitor for connections to 212.224.107.10 and update network defenses accordingly.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 20 identified
Popular CSS framework for responsive, mobile-first web development.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comFast CDN for everything on npm — serves raw files from npm packages.
Modern mobile touch slider with hardware-accelerated transitions.
Free public CDN for open-source projects, serving files from npm and GitHub.
Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comIcon font library.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of oxidefai.com · checked Mar 24, 2026
Données factuelles et rapports externes
PD-20260324-C0766C Recipient: u-abuse@ultahost.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif