saldo188aku[.]com

saldo188aku.com is currently classified as a high‑risk generic phishing domain. The domain was registered on May 25 2026 through NameCheap, Inc., and its Gridinsoft trust score is 0 out of 100, indicating a lack of credibility. The site serves content over HTTPS using a Let’s Encrypt certificate (E8), but the presence of a valid certificate does not mitigate the malicious intent observed. The hosting infrastructure points to a single IPv4 address, 45.194.53.26, which resolves to a server located in Brazil and operated by Cloud Innovation Ltd. The domain relies on Cloudflare’s DNS service, using the authoritative nameservers nile.ns.cloudflare.com and sasha.ns.cloudflare.com. An HTTP request to the root URL returns a 403 status code, a response often employed to obscure content while still allowing targeted payload delivery through alternative endpoints. Multiple security vendors have flagged the domain; VirusTotal records five detections out of ninety‑five scanners, and the domain appears on one public blocklist. It is also listed by PhishDestroy as blocked, reinforcing the view that the domain is actively used for phishing campaigns. Because the site uses a legitimate TLS certificate, endpoint security solutions should inspect HTTPS traffic for known phishing indicators rather than relying on certificate validation alone. Defenders should block all network traffic to 45.194.53.26 and add saldo188aku.com to URL filtering policies. Continuous monitoring of DNS queries for the Cloudflare nameservers can help detect any future sub‑domain expansions. Organizations are advised to educate users about the likelihood of credential‑stealing pages that may be hosted under this domain.