haicommunityai[.]com

The domain haicommunityai.com is a confirmed phishing site engaged in brand impersonation targeting the Scroll project. It presents itself as an AI-powered investment platform under the name 'HAI Community' but operates as a scam to deceive users through fraudulent investment or credential harvesting schemes. No crypto drainer kit was detected. The site is currently taken offline, reducing immediate risk but not eliminating potential follow-up threats from collected data.

Technical indicators confirm haicommunityai.com as malicious. As of analysis, 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appears on 1 security blocklist (PhishDestroy) and was registered on May 19, 2025, through Gname.com Pte. Ltd. It resolved to IP address 104.21.48.1, hosted on Cloudflare's US infrastructure (AS13335), and used an SSL certificate issued by WE1. The observed page title was 'HAI Community | AI-Powered Investment Solutions & Education', reinforcing its impersonation of legitimate investment or blockchain services.

Users who interacted with haicommunityai.com should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or identity fraud. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts via wallet management tools like Etherscan or Revoke.cash. Report the domain to platforms such as Google Safe Browsing, PhishTank, or local cybercrime units to aid in broader takedown efforts.