aitopianow[.]club

This domain, aitopianow.club, is flagged as an active phishing site targeting users with a Japanese-language AI education and training theme. Analysis indicates the domain was registered on December 18, 2025, through NameSilo, LLC, and is currently resolving to Cloudflare IP 104.21.26.143 (AS13335). The site returns an HTTP 301 redirect, suggesting it may be funneling traffic to a secondary malicious endpoint.

Infrastructure analysis reveals Cloudflare nameservers (dana.ns.cloudflare.com and ethan.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which are common among both legitimate and malicious sites but do not mitigate the threat. Three of 95 security vendors on VirusTotal have flagged this domain, and it appears on one security blocklist, specifically PhishDestroy. The page title, 'AitopiaのAI教育とトレーニング｜未来志向のスキル習得,' directly translates to a focus on AI education, which may be used to lure victims into credential harvesting or malware distribution.

No specific phishing kit or brand impersonation has been confirmed beyond the thematic content. Defenders should treat this domain as high-risk, block it at the network level, and monitor for associated IP or certificate reuse. Further analysis of the redirect target and any collected payloads is recommended to determine the full scope of the campaign.