ai[.]cyraai[.]app

The domain ai.cyraai.app has been identified as a confirmed phishing site with a high-risk rating. Registered on March 22, 2026, through GNAME.COM PTE. LTD., the site currently holds a Scamadviser trust score of 1 out of 100, indicating a very low level of trustworthiness. This domain is actively monitored and appears on one security blocklist, further corroborating its malicious intent. The SSL certificate for this domain is issued by Amazon, which does not imply legitimacy given the context of its use. The domain resolves to the IP address 18.66.147.44, which is part of Amazon's infrastructure, often utilized by various online services, including potentially malicious ones.

Analysis of the domain's reputation reveals that it has been flagged by 12 out of 95 security vendors on VirusTotal, emphasizing the consensus among security researchers regarding its phishing nature. Moreover, the domain is actively blocked by PhishDestroy, a security service aimed at mitigating phishing threats. The technologies detected on the site include Vue.js, Amazon Web Services, Amazon S3, and Amazon CloudFront, which are commonly used for legitimate web applications but can also be exploited by malicious actors to create convincing phishing sites.

Given the current evidence, defenders are advised to implement strict email filtering and web blocking for this domain to mitigate the risk of phishing attacks targeting users. Continuous monitoring and threat intelligence sharing about this domain and similar infrastructures should be prioritized. Organizations should educate their users to recognize phishing attempts and report any suspicious communications that may originate from this domain or related entities. The active status of ai.cyraai.app necessitates immediate attention to prevent potential data breaches or credential theft.