VerAI
Investigate. Analyze. Verify.
AI-powered security analysis for websites, files, phone numbers, email addresses, and IPs
verai.us
Verification AI, commonly known as VerAI, is a web-based cybersecurity analysis and verification platform developed by QVLX.
VerAI brings together website security inspection, threat intelligence, file reputation analysis, phone number validation, email domain inspection, and IP address intelligence.
Core Capabilities
| Module | Description |
|---|---|
| Website Analysis | Inspect DNS, TLS, certificates, HTTP headers, WHOIS, and other website characteristics |
| AI Security Assessment | Generate AI-assisted observations about potentially suspicious websites |
| File Analysis | Obtain VirusTotal reputation information for uploaded files |
| Phone Verification | Validate US phone number formats and identify associated geographic information |
| Email Verification | Inspect mail exchange records and domain registration age |
| IP Intelligence | Check DNS blocklists, reverse DNS, geolocation, and GreyNoise classifications |
Website Security Analysis
VerAI performs several technical checks against a submitted website.
These include:
- IP address resolution
- Server country lookup
- HTTP response headers
- Security response headers
- TLS cipher and protocol inspection
- SSL/TLS certificate details
- WHOIS registration information
- DNS record retrieval
- Reverse DNS lookup
- SSH service banner inspection
- Google Safe Browsing threat lookup
- AI-assisted security observations
Results depend on the target website's configuration and the availability of third-party services.
AI-Assisted Website Verification
VerAI submits website identifiers to external AI services to obtain security-focused observations.
The supplied implementation includes integrations for:
- Groq-hosted language models
- OpenAI language models
A separate Gemini integration is also present in the source code, but it is not called by the main website analysis workflow.
AI results are advisory assessments rather than definitive proof that a website is safe or malicious.
File Reputation Analysis
The File Analysis module uses VirusTotal.
VerAI calculates a SHA-256 hash of the uploaded file and attempts to retrieve existing reputation information.
When an existing report is unavailable, the application attempts to submit the file for analysis.
Privacy notice: Files submitted for scanning may be transferred to VirusTotal. Do not submit confidential or sensitive files without understanding the external service's data-handling policies.
Phone Number Verification
VerAI checks the structure and validity of US telephone numbers.
Supported information includes:
- Input validity
- Country information
- Associated time zones
The module uses Google's libphonenumber-derived Python library.
Email Domain Verification
VerAI inspects email domain characteristics, including:
- MX records
- Domain registration age
These checks can help investigate a domain's mail configuration and apparent registration history.
They do not establish whether a specific mailbox exists or is controlled by a particular person.
IP Address Intelligence
VerAI can inspect an IPv4 address using:
- DNS blocklist lookups
- Reverse DNS
- Country geolocation
- GreyNoise community intelligence
These signals may help identify suspicious or noteworthy network activity.
Intended Uses
VerAI can assist with:
- Investigating suspicious websites
- Reviewing website security configurations
- Checking file reputation
- Examining email domain characteristics
- Investigating IP addresses
- Validating US phone number formats
- Supporting preliminary security triage
Understanding Verification
No single signal proves that a website, file, address, or number is trustworthy.
A website can have valid encryption and still be malicious.
A file can have no known detections and still contain harmful code.
An IP address can appear on a reputation list without representing an active threat.
VerAI should be used as an investigative aid, with results interpreted in context.
Updated about 6 hours ago