VirusTotal
6 / 91
“OpenClaw AI — Solana Token Analytics”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@globaldomaingroup.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
ai-openclaw.digital — Terakhir diketahui aktif (HTTP 302). Peniruan identitas merek: Solana; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 6/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); URLQuery 5 alerts; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Registrar: Global Domain Group.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
6 / 91
5 threat-system alerts
LaporanDBL_PHISH
4 community references
Laporanprovider verdict: clean
Laporanlaporan yang disimpan
Laporan Analisis selesai
LaporanChecked; no threat flag recorded
Laporan| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | ai-openclaw.best |
malicious | Sinkholed |
| DNS4EU | ai-openclaw.best |
malicious | Sinkholed |
| DigiCert UltraDNS | ipfs.io |
malicious | Sinkholed |
| Hagezi Threat Feed | ai-openclaw.digital |
malicious | Sinkholed |
| DNS4EU | ai-openclaw.digital |
malicious | Sinkholed |
This domain, ai-openclaw.digital, is confirmed as an active phishing site with a high-risk classification. Registered on June 26, 2026, through Global Domain Group LLC, it currently resolves to the IP address 104.21.27.141. Analysis indicates that 5 of 95 security vendors on VirusTotal have flagged this domain as malicious, suggesting a pattern consistent with phishing infrastructure. The domain's creation date aligns with recent phishing campaigns, and its naming convention (incorporating 'ai' and 'claw') may be designed to mimic cloud-based or AI-related services, though the exact brand or service being impersonated has not been confirmed. Defenders should treat this domain as hostile. Block DNS resolution to 104.21.27.141 for all internal assets and monitor for any outbound connections to this IP or domain. Given the high-risk status and active resolution, assume any interaction with this domain could lead to credential theft or malware delivery. No specific phishing kit or payload has been identified in available intelligence, so further analysis of network traffic or endpoint logs may be required to determine the full scope of the threat. The domain remains active as of July 19, 2026, and should be prioritized for immediate containment.
Data pengamatan perbandingan crawler versus browser yang telah disimpan untuk host ini, ditambah pemeriksaan sidik jari secara real-time untuk sistem distribusi lalu lintas bergaya Keitaro.
cloudflareCatatan pemindai: redirect: raw=redirect_302; http=302; via=https_proxy; location=https://ai-openclaw.click/x; server=cloudflare
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Reputasi Edge-IP tidak dikaitkan dengan domain ini.
dakota.ns.cloudflare.comholly.ns.cloudflare.comLocation describes the IP network.
bc9f75c97280e9b051db3e4201fd8d15ee964db12dddafa274be833d2f0a3b98Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of ai-openclaw.digital · checked Jul 19, 2026
13 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
118 domain serupa tersimpan
Menampilkan 100 dari 118
PD-20260719-ADA394 Recipient: abuse@globaldomaingroup.com Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (Unknown): International Anti-Cybercrime Regulations Budapest Convention on Cybercrime Universal Fraud Prevention Laws Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Template-based draft · optional AI wording assistance requires separate consent
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanLaporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauPantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive