estee[.]ai-cryptolist[.]com

The domain estee.ai-cryptolist.com is identified as a generic phishing site with an elevated risk level. It is currently offline and appears to impersonate the brand Estee. The domain was registered through Key-Systems GmbH and has been flagged by 12 of 95 security vendors on VirusTotal, indicating a significant level of suspicion.

Analysis of the domain's infrastructure reveals that it resolves to the IP address 188.114.97.3 and was created on April 11, 2026. The SSL certificate for the domain is issued by Google Trust Services under the WE1 label. Additionally, the domain appears on 1 security blocklist, further corroborating its potential threat. The combination of these indicators suggests that the domain is likely involved in malicious activities designed to trick users into providing sensitive information.

Given the current offline status of the domain, the immediate risk to users is reduced. However, it is recommended that any organization or individual previously interacting with this domain conduct a thorough review of their systems for any signs of compromise. Security teams should also consider adding this domain to their blocklists to prevent future access and potential phishing attempts. Regular monitoring of domain registration and IP resolution is advised to detect any reactivation or related malicious activities.