aii-chuirokin-or-jp[.]net

The domain aii-chuirokin-or-jp.net is currently flagged as a high‑risk generic phishing infrastructure and has been taken offline as of the report date, July 24, 2026. Registration data shows the domain was created on December 01, 2025 through Aceville Pte. Ltd., and it is served by the DNSPod nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com. DNS resolution points to the IP address 34.97.159.198, which belongs to AS396982 owned by Google LLC and is geolocated in Japan. No SSL certificate is present on the host, indicating that any attempted web connections would lack transport‑layer encryption. Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0/100, while Scamadviser gives a 1/100 rating.

VirusTotal analysis shows that 20 out of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The domain appears on one public security blocklist and is listed by Google Safe Browsing as a social‑engineering threat. PhishDestroy has also blocked the domain, and AlienVault OTX references it in 17 separate threat‑intel pulses. The available evidence points to a coordinated phishing campaign, yet the specific brand or service being impersonated has not been disclosed in the collected intelligence.

Uncertainty remains regarding the exact payload, landing page content, and any credential‑harvesting mechanisms, as no page title or content analysis is provided. Defenders should immediately add aii-chuirokin-or-jp.net to network‑level blocklists, enforce DNS sink‑holing for its associated IP, and monitor outbound traffic to Google‑hosted infrastructure originating from this address. Continuous re‑scanning on platforms such as VirusTotal is recommended to capture any evolution of the payload, and organizations should update email filters to flag messages that reference this domain.