VirusTotal
12 / 91
“Node AI”
nai.systems — Bilinen son aktif (HTTP 200). Dolandırıcılık türü: Generic Phishing. Kanıt özeti: VirusTotal 12/91 (ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. Kayıt kuruluşu: NameCheap.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
12 / 91
DBL_PHISH
6 community references
Bildirprovider verdict: clean
Bildirsaklanan rapor
Bildir Analiz tamamlandı
Bildir14 kontrol edildi — engelleme yok
57/100
Checked; no threat flag recorded
BildirThis domain, nai.systems, is flagged as a phishing infrastructure impersonating Node AI, a legitimate artificial intelligence platform. Analysis indicates the domain is designed to deceive users into entering sensitive credentials or downloading malicious payloads under the guise of AI-related services. The page title explicitly displays 'Node AI,' suggesting a direct attempt to mimic the branding and functionality of the authentic service, which increases the likelihood of successful social engineering attacks against users familiar with the legitimate platform. Infrastructure analysis reveals the domain was registered on August 06, 2024, through NameCheap, Inc., and currently resolves to the IP address 104.21.10.73. As of the latest scan, VirusTotal reports 0 out of 95 security vendors flagging the domain as malicious, indicating it has not yet been widely detected or blocklisted. The SSL certificate is issued by Google Trust Services, which provides a veneer of legitimacy but does not mitigate the underlying threat. The domain remains active and unflagged by most security mechanisms, allowing it to operate without immediate disruption. Users who have visited nai.systems or interacted with its content should take immediate action to mitigate potential risks. Any credentials entered on the site should be considered compromised and must be changed immediately across all platforms where the same or similar passwords were used. System scans using updated security tools are recommended to detect any downloaded payloads or secondary infections. If financial or sensitive personal information was submitted, affected individuals should monitor accounts for unauthorized activity and consider reporting the incident to relevant authorities. Network-level blocking of the domain and its associated IP address (104.21.10.73) is advised to prevent further exposure.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
cloudflareTarayıcı notu: alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP itibarı bu etki alanıyla ilişkilendirilmez.
mona.ns.cloudflare.comtim.ns.cloudflare.comLocation describes the IP network.
3cfbdcc4ab1ee191bfc616cbe8a07d39853bb8018eb4ec2b6cba3d8d73be399fSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of nai.systems · checked Jul 9, 2026
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin