oxidefai[.]com
“OxideFAI – AI Trading”
PhishDestroy identifies oxidefai.com as an active generic phishing domain impersonating AI Trading services, suspected to host a crypto drainer kit designed to siphon cryptocurrency assets. The page, titled OxideFAI – AI Trading, leverages a deceptive front-end built with Bootstrap, Material Design Lite, Leaflet, and particles.js, suggesting a polished but malicious interface. The backend operates on a Microsoft ASP.NET stack hosted via IIS on a Windows Server, with SSL provided by Let’s Encrypt, indicating an attempt to appear legitimate while concealing malicious intent.
Technical indicators reveal a highly evasive setup: oxidefai.com boasts a current VirusTotal detection score of 0/95, remains unflagged by Google Safe Browsing, and shows no presence on major blocklists despite its recent creation on September 16, 2025. The domain is registered through Ultahost, Inc. and resolves to IP address 212.224.107.10, which has not yet been widely blacklisted. This combination of fresh registration, low detection rates, and sophisticated front-end frameworks highlights a deliberate effort to evade early-stage detection mechanisms.
Currently, oxidefai.com remains active and under investigation, with no immediate takedown action reported. Users are advised to avoid interaction and verify any AI Trading-related links using PhishDestroy’s verification tools. While the immediate risk is classified as under investigation, the lack of current detections suggests potential for rapid escalation. Remaining risk hinges on further analysis and blocklist propagation—organizations should monitor for connections to 212.224.107.10 and update network defenses accordingly.
Catatan laporan keluar
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260324-C0766C- Judul halaman yang direkam
- OxideFAI – AI Trading & DeFi Platform | Blockchain Investment Solutions
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber · disinkronkan 09/08/2026
Linimasa deteksi
Pengamatan tersimpan dalam urutan kronologis.
-
Pengamatan tersimpan
Pengamatan tersimpan: alive → dead
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of oxidefai.com · checked Mar 24, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive