00[.]ai

The domain 00.ai is currently active and has been classified as a brand impersonation campaign targeting the brand argent. Infrastructure analysis shows the domain was registered on December 16, 2017 through Spaceship, Inc. and continues to resolve to the IP address 44.232.173.249, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. DNS records indicate authoritative nameservers launch1.spaceship.net and launch2.spaceship.net, while the MX configuration points to mx1.efwd.spaceship.net (priority 0) and an additional MX entry that appears truncated in the provided data, both also hosted by the same registrar. The web server presents an HTTP 200 response and advertises a page title "For Sale Page".

Detected server technologies include Nginx, OpenResty, and HTTP Strict Transport Security (HSTS). The site uses a Let’s Encrypt R12 certificate, confirming TLS encryption is in place. Reputation signals are extremely poor: a Gridinsoft trust score of 0/100 and appearance on a single security blocklist, where it has already been blocked by PhishDestroy. VirusTotal analysis shows four of ninety-five security vendors flag the domain, reinforcing the malicious assessment.

While the exact visual content of the page is not disclosed, the available evidence—registered with a known registrar used for disposable domains, hosting on a cloud provider, low trust score, and multiple security vendor detections—strongly suggests a fraudulent operation. Defenders should immediately block 00.ai at the DNS and proxy layers, add its IP address to network deny lists, and configure email security gateways to reject messages from the listed MX hosts. Continuous monitoring for new domains employing the same nameserver pattern or similar SSL certificates is advised, as is periodic re‑scanning of the site for any changes in detection status.