nerdyai[.]sendcity[.]ng

This domain, nerdyai.sendcity.ng, is identified as a generic phishing threat designed to mimic a legitimate AI-driven sentiment analysis platform. The page title, 'Nerdy AI: Precision Sentiment Intelligence,' suggests an attempt to deceive users into believing they are interacting with a specialized analytics service. No direct association with known drainer kits or established brands was observed, but the domain exhibits characteristics typical of credential-harvesting phishing infrastructure, including fake login prompts and data submission forms. Analysis indicates the domain resolves to the IP address 192.3.190.187 and is registered through an autonomous system (ASN: 36352) with the identifier CC-192-3-190-184-29. Security vendors on VirusTotal flagged the domain at a 3/95 detection rate, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. No Google Safe Browsing (GSB) status was recorded at the time of analysis, and the SSL certificate is issued directly to nerdyai.sendcity.ng, lacking validation from a trusted certificate authority. The domain has been taken offline, reducing immediate risk to end users. However, residual threats persist, including potential reuse of the infrastructure or migration of the phishing campaign to a new domain. Organizations and individuals are advised to monitor for similar domains leveraging the 'sendcity.ng' subdomain structure or the 'Nerdy AI' branding. Network administrators should block the IP 192.3.190.187 and the associated ASN (36352) to mitigate exposure. Users who interacted with the domain should reset credentials and enable multi-factor authentication on affected accounts.