gusd[.]ai-cryptolist[.]com

This domain, gusd.ai-cryptolist.com, is flagged as a high-risk generic phishing threat currently active as of July 12, 2026. Registered on April 11, 2026, through Key-Systems GmbH, the domain exhibits several indicators of malicious intent. It resolves to IP address 188.114.97.3, which is hosted by Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services (WE1), and nameservers are Cloudflare's standard set (aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com). The page title is 'Just a moment...', a common placeholder often used by phishing sites to display a loading screen before redirecting victims to fraudulent pages. VirusTotal reports that 2 out of 94 security vendors flag this domain as malicious, and it appears on one security blocklist. PhishDestroy has also blocked it. The Gridinsoft trust score is 0 out of 100, reinforcing the assessment of unreliability. The HTTP status is 302, indicating a redirect, which is typical for phishing campaigns that steer users to credential-harvesting pages. While the exact target brand or scam type is not explicitly named in the available data, the domain name includes 'ai-cryptolist', suggesting a possible association with cryptocurrency or artificial intelligence topics, but this is not confirmed. Defenders should block all traffic to this domain and any subdomains, monitor for similar patterns (e.g., variations of 'cryptolist' or 'ai' combined with suspicious TLDs), and investigate any users who may have interacted with it. No additional details about the phishing kit or specific victim targeting are present in the intelligence provided.