ai-traid[.]com

On July 20, 2026, the domain ai-traid.com was identified as a high‑risk generic phishing site. The domain was registered on July 15, 2026 through Fewmoretaps OU d/b/a Trustname.com and resolves to the IPv4 address 45.140.167.123. DNS configuration shows four authoritative name servers: ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed. Google Safe Browsing classifies the host under the MALWARE category, which includes phishing indicators. VirusTotal reports that one of ninety‑five scanned security vendors flagged the domain as malicious, reinforcing the suspicion. No additional public analysis of the HTTP response, SSL certificate, or page title is currently available, leaving those vectors unverified. The limited detection surface—single vendor flag, blocklist entry, and Safe Browsing MALWARE label—suggests a low‑profile but functional phishing operation. Defenders should immediately add ai-traid.com to network‑level deny lists, configure DNS sink‑hole or firewall rules to drop traffic to the resolved IP address, and monitor for any further resolution changes. Continuous re‑scanning with multi‑engine services is recommended to capture any new detections. Organizations should also review outbound email filters for messages that reference the domain, as the phishing campaign likely targets credential harvesting. Because the registration details are recent and the domain is still active, rapid containment is advised to reduce exposure.