Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
beautydata[.]ai
“BEAUTYDATA - Global Leading Beauty AI & Data Insights Platform”
beautydata.ai — Último ativo conhecido (HTTP 200). Resumo das evidências: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Registrador: NiceNIC.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain beautydata.ai was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently active. DNS resolution points to IP address 47.57.152.226, which belongs to AS45102 Alibaba (US) Technology Co., Ltd. and is geolocated in Hong Kong. The domain uses the Chinese nameservers ns1.ndns.cn and ns2.ndns.cn. An SSL certificate issued by WoTrus CA Limited (WoTrus DV Server CA) is present, indicating that TLS is offered but provides no additional trust signals.
The web server returns HTTP 200 and hosts a page titled "BEAUTYDATA - Global Leading Beauty AI & Data Insights Platform". Front‑end technologies detected include Three.js, Vue.js, Nginx, HubSpot, and Google Analytics, suggesting a modern site stack but offering no insight into malicious functionality. The domain appears on a single security blocklist and is blocked by the PhishDestroy service. VirusTotal analysis shows that one out of ninety‑three scanned security vendors flagged the domain, reinforcing the presence of at least one detection.
No further public intelligence, such as OTX or additional blocklist entries, is available. Given the recent creation date, the association with a known phishing blocklist, the single vendor detection, and the use of a generic brand‑neutral page title, the infrastructure aligns with typical phishing campaign setups. Defenders should consider adding beautydata.ai to network and endpoint deny lists, monitor DNS queries for the associated IP and nameservers, and enforce URL filtering that blocks access to the site. Continuous re‑evaluation is advised, as additional detections or content analysis could alter the risk posture.
Inteligência de segurança de rede Registrar context
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Latest Classified Outcome 2026-08-19 02:38:12 UTC
Tecnologias · 5 identified
Progressive JavaScript framework for building user interfaces.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comAnálise do VirusTotal
Evidências arquivadas
Evidências e relatórios externos
PD-20260213-3BDB57 Recipient: abuse@nicenic.net Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo