salvium[.]ai-cryptolist[.]com

The domain salvium.ai-cryptolist.com has been assessed as posing an elevated risk of generic phishing. Users accessing this domain may be exposed to credential theft, financial loss, and potential malware distribution. The specific threat involves the impersonation of AI-driven cryptocurrency listing services, potentially tricking visitors into divulging sensitive information or making unauthorized transactions.

Analysis indicates that the domain resolves to the IP address 188.114.96.3 and is registered through Key-Systems GmbH. The domain was created on April 11, 2026. VirusTotal reports that 18 out of 95 security vendors flag this domain as malicious, reflecting a significant level of suspicion within the cybersecurity community. The domain appears on one security blocklist, further corroborating its malicious nature. Gridinsoft provides a trust score of 0/100, the lowest possible rating, indicating a severe lack of trustworthiness. The SSL certificate is issued by Google Trust Services, which may initially lend a false sense of legitimacy to the site. Currently, the domain is offline, suggesting that it may have been taken down due to security concerns or to avoid detection.

To mitigate the risks associated with this domain, users are advised to avoid accessing any links or emails that lead to salvium.ai-cryptolist.com. Network administrators should update firewall and DNS rules to block traffic to the IP address 188.114.96.3. Security teams should monitor for any related subdomains or IP addresses and ensure that all systems are patched and updated to prevent potential exploitation. Additionally, users should be educated on the signs of phishing, including suspicious URLs, unexpected requests for personal information, and the importance of verifying the authenticity of websites and emails, especially those related to financial or sensitive information.