dapp[.]haivip[.]xyz

This domain, dapp.haivip.xyz, is under investigation for phishing activity targeting users of a platform identified in the page title as 'HAI智能平台' (HAI Smart Platform). Registered on February 21, 2026, through Go Daddy, LLC, the domain remains active as of July 12, 2026. Infrastructure analysis reveals the use of Cloudflare services, including HTTP/3 and HSTS, alongside Vue.js for frontend development. The domain resolves to IP address 104.21.40.91, and its SSL certificate is issued by Google Trust Services, which does not inherently indicate malicious intent but is consistent with modern phishing infrastructure. Security vendors have flagged the domain, with 5 out of 95 engines on VirusTotal detecting it as malicious. It appears on two security blocklists and has been assigned a trust score of 0/100 by Gridinsoft, further supporting its classification as high-risk. The combination of recent registration, Cloudflare obfuscation, and detection by multiple security tools suggests an intent to evade takedown efforts while targeting users of the HAI platform. Defenders are advised to monitor network traffic for connections to this domain, particularly in environments where access to HAI-related services is expected. The exact nature of the phishing content—whether credential harvesting, fraudulent transactions, or other malicious activity—remains unconfirmed, as the site’s specific functionality has not been analyzed. Given its active status and detection history, blocking or sinkholing this domain at the network level is recommended to mitigate potential threats.