interest-usdai[.]org

Analysis of interest-usdai.org on July 12, 2026, indicates a high-risk generic phishing domain that remains active. The domain was registered on April 14, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and its nameservers (kay.ns.cloudflare.com, wells.ns.cloudflare.com) point to CloudFlare infrastructure. It resolves to IP address 188.114.97.3, also associated with CloudFlare, Inc., located in Canada. The SSL certificate is issued by Let's Encrypt (E7). The page title is 'Just a moment...', and the HTTP status is 403 Forbidden, suggesting the site may present a challenge or block direct access. Current threat intelligence shows the domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports 2 of 94 security vendors flagging the domain as malicious. AlienVault OTX includes it in one threat intelligence pulse. The Gridinsoft trust score is 0 out of 100, reinforcing the high-risk classification. Defenders should block all traffic to this domain and its associated IP address. The exact phishing content is not yet analysed, but the combination of recent registration, low trust score, and multiple blocklist listings warrants immediate restriction. Users encountering this domain should avoid interaction, as it is likely part of a credential harvesting or social engineering campaign. Monitoring for related subdomains or IP changes is advised, as the domain remains operational and could evolve its attack surface.