Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
beautydata[.]ai
“BEAUTYDATA - Global Leading Beauty AI & Data Insights Platform”
beautydata.ai — Bilinen son aktif (HTTP 200). Kanıt özeti: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 71/100. Kayıt kuruluşu: NiceNIC.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain beautydata.ai was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently active. DNS resolution points to IP address 47.57.152.226, which belongs to AS45102 Alibaba (US) Technology Co., Ltd. and is geolocated in Hong Kong. The domain uses the Chinese nameservers ns1.ndns.cn and ns2.ndns.cn. An SSL certificate issued by WoTrus CA Limited (WoTrus DV Server CA) is present, indicating that TLS is offered but provides no additional trust signals.
The web server returns HTTP 200 and hosts a page titled "BEAUTYDATA - Global Leading Beauty AI & Data Insights Platform". Front‑end technologies detected include Three.js, Vue.js, Nginx, HubSpot, and Google Analytics, suggesting a modern site stack but offering no insight into malicious functionality. The domain appears on a single security blocklist and is blocked by the PhishDestroy service. VirusTotal analysis shows that one out of ninety‑three scanned security vendors flagged the domain, reinforcing the presence of at least one detection.
No further public intelligence, such as OTX or additional blocklist entries, is available. Given the recent creation date, the association with a known phishing blocklist, the single vendor detection, and the use of a generic brand‑neutral page title, the infrastructure aligns with typical phishing campaign setups. Defenders should consider adding beautydata.ai to network and endpoint deny lists, monitor DNS queries for the associated IP and nameservers, and enforce URL filtering that blocks access to the site. Continuous re‑evaluation is advised, as additional detections or content analysis could alter the risk posture.
Ağ Güvenliği İstihbaratı Registrar context
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Latest Classified Outcome 2026-08-16 02:38:50 UTC
Teknolojiler · 5 identified
Progressive JavaScript framework for building user interfaces.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Web analytics service tracking website traffic and user behavior.
marketingplatform.google.comVirusTotal Analizi
Arşivlenmiş Kanıtlar
Kanıtlar ve Dış Raporlar
PD-20260213-3BDB57 Recipient: abuse@nicenic.net Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin