nodalis-ia-v30[.]sbs

This domain, nodalis-ia-v30.sbs, poses as a legitimate AI-driven investment trading platform to deceive users into transferring funds or disclosing financial credentials. The site uses fabricated branding and professional design elements to mimic an official company portal, specifically targeting individuals interested in automated trading or high-yield investment opportunities. Victims may be lured into depositing cryptocurrency or providing sensitive account details under the guise of exclusive investment access. Analysis indicates the domain is actively malicious, with five out of ninety-five security vendors on VirusTotal detecting it as harmful. The domain was registered on June 12, 2024, through NameSilo, LLC, and currently resolves to the IP address 104.21.80.171, hosted on Cloudflare’s network (AS13335). The SSL certificate, issued by Google Trust Services (WE1), adds a superficial layer of legitimacy, while the page title explicitly claims affiliation with an AI company, furthering the deception. The domain appears on three security blocklists, including PhishDestroy and MetaMask’s threat feeds. If you visited nodalis-ia-v30.sbs or interacted with its content, take immediate action to secure your accounts. Disconnect any connected wallets or devices from the site and revoke permissions for associated smart contracts. Monitor financial accounts for unauthorized transactions and report suspicious activity to your financial institution. Consider scanning your device for malware, as some investment scams deploy additional payloads. Reset credentials for any accounts accessed while on the site, and report the domain to relevant fraud authorities or cybersecurity organizations for further investigation.