aisizzusou[.]i4-app[.]icu

The domain aisizzusou.i4-app.icu was registered on September 28, 2025 through Gname.com Pte. Ltd. and is presently taken offline. DNS resolution points to the IPv4 address 172.245.67.31, which is hosted in the United States under autonomous system AS36352 operated by HostPapa. The authoritative name servers are a2.share-dns.com and b2.share-dns.net, both typical of shared‑hosting environments. A TLS certificate is presented for the IP address 172.245.67.50, indicating a possible mismatch between the certificate host and the domain, a pattern often observed in malicious infrastructure.

The site’s HTML title resolves to the Chinese text "爱思助手", but no further page content has been captured. Security telemetry shows the domain appears on a single blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0 out of 100, reflecting a lack of confidence in its legitimacy. VirusTotal analysis recorded two detections out of ninety‑five scanners, confirming that at least a small subset of security products recognize the domain as malicious.

The limited detection surface—few blocklist entries and low scanner coverage—means that broader visibility may be lacking, but the combination of a non‑matching SSL certificate, low trust score, and presence on a phishing‑focused blocklist strongly suggests a phishing operation. Defensive teams should add aisizzusou.i4-app.icu to URL filtering and DNS block policies, monitor traffic to the associated IP range, and consider extending threat‑intel sharing to include the identified name servers and hosting provider. Further investigation of the page content, if the site returns online, would be advisable to confirm the phishing vector and to enrich detection signatures.