superfortune[.]ai

PhishDestroy has identified superfortune.ai as a brand impersonation threat specifically targeting Telegram. This domain is currently offline, but its recent activity poses an elevated risk to users who may encounter it through phishing campaigns. The domain was created on December 08, 2025, and registered through Squarespace Domains LLC, resolving to IP address 216.150.1.193.

VirusTotal analysis shows that 13 out of 95 security vendors flagged this domain as malicious, indicating a moderately high consensus among threat detection systems. It appears on one security blocklist and has been included in one AlienVault OTX threat intelligence pulse. The SSL certificate was issued by Let's Encrypt (R12), which is commonly abused by malicious actors. The page title found during investigation was SUPERFORTUNE, which aligns with the fraudulent branding used to deceive visitors.

Since the domain is already offline, users are advised to remain vigilant against similar domains that may appear in the future. Anyone who has interacted with superfortune.ai should check their accounts for unauthorized access and consider changing passwords, especially for Telegram. PhishDestroy recommends avoiding any unsolicited links and verifying the authenticity of websites before entering credentials.