adam-back[.]ai-cryptolist[.]com

PhishDestroy identifies adam-back.ai-cryptolist.com as a live generic phishing domain currently active and posing an elevated risk to users.

This domain, ai-cryptolist.com, masquerades as a legitimate cryptocurrency listing service but is designed to deceive visitors into disclosing sensitive account credentials or downloading malware. The domain resolves to IP address 188.114.96.3 and is flagged by 1 of 95 VirusTotal security vendors. It holds a valid SSL certificate issued by Google Trust Services, increasing its credibility to unsuspecting users. While specific creation date and registrar details remain unverified in open sources, the domain’s low detection count on VirusTotal suggests it is newly deployed or lightly used in campaigns.

Risk assessment indicates that adam-back.ai-cryptolist.com leverages the trust of cryptocurrency enthusiasts by mimicking a legitimate crypto listing platform. The use of a Google-issued SSL certificate further enhances its legitimacy, making it more likely to trick users into entering login details or payment information. Although only one security vendor has detected it, the presence of such a domain in active circulation signals a potential broader threat. Users are advised to avoid interacting with this domain entirely and to report it to their security teams or through platforms like PhishDestroy. Organizations should consider blocking the IP address 188.114.96.3 and the domain at the network perimeter to prevent access and reduce exposure to credential theft or malware delivery.