snibbu[.]ai-cryptolist[.]com

This domain, snibbu.ai-cryptolist.com, was registered on 5 November 2025 through Key-Systems GmbH and is currently hosted at the IPv4 address 188.114.97.3. The authoritative name servers are aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com, indicating that the domain is using Cloudflare’s DNS infrastructure. As of the report date 29 July 2026 the domain is classified as an active, elevated‑risk generic phishing site. PhishDestroy has already added the domain to its block list, and it also appears on one additional security blocklist.

VirusTotal has recorded 18 detections out of 91 submitted security vendors, confirming that a notable portion of commercial scanners consider the domain malicious. No further public analysis of the web page content, SSL certificate details, or HTTP response codes has been published, so the exact phishing payload and targeted brand remain unknown. Analysts should treat the domain as hostile, enforce network‑level blocking, and add it to endpoint allow‑list exclusions. Continuous monitoring of the IP address 188.114.97.3 for any new activity is advised, as well as periodic re‑scans on VirusTotal to capture any changes in detection ratios.

Threat intelligence feeds that reference the domain should be updated, and any inbound traffic to the domain should be logged for forensic correlation. Because the domain relies on Cloudflare’s edge network, any takedown request must be directed through the registrar or Cloudflare abuse channels. Until additional evidence is released, defenders should assume that any URL under snibbu.ai-cryptolist.com may be used to harvest credentials or deliver further malicious payloads.