notifai-news[.]ai-cryptolist[.]com

This domain is flagged as an elevated-risk cryptocurrency phishing site targeting users through deceptive notifications and fake crypto-related content. Analysis indicates the infrastructure was designed to mimic legitimate cryptocurrency news or alert services, likely to harvest credentials or distribute malicious payloads under the guise of financial updates. Infrastructure analysis reveals the domain notifai-news.ai-cryptolist.com was registered via Key-Systems GmbH and resolved to IP address 188.114.97.3. It was created on April 11, 2026, and is currently offline. The domain appears on one security blocklist and is flagged by 18 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services, and the site employed technologies including IPFS, Vue.js, Cloudflare, and HTTP/3. A trust score of 0/100 was assigned by Gridinsoft, further corroborating its malicious classification. Mitigation steps for cryptocurrency phishing threats include verifying domain registration dates and SSL certificate issuers before interacting with financial or crypto-related sites. Users should cross-reference alerts or news with official sources and avoid clicking links from unsolicited notifications. Network administrators are advised to block the domain and associated IP address (188.114.97.3) at the perimeter. Monitoring for similar domains registered through the same registrar or resolving to the same IP range may help preempt further phishing attempts.