gradient-trade[.]ai-cryptolist[.]org

The domain gradient-trade.ai-cryptolist.org is actively engaged in phishing activities, specifically targeting cryptocurrency users through fake login schemes. This domain does not appear to impersonate a well-known brand but rather operates as a generic phishing entity. There is no evidence of a specific drainer kit being used, but the infrastructure suggests a focus on harvesting sensitive user information under the guise of cryptocurrency exchanges.

In terms of technical analysis, gradient-trade.ai-cryptolist.org was created on April 11, 2026, and is registered through Key-Systems GmbH. According to VirusTotal, 18 out of 95 security vendors have flagged this domain as malicious. The domain utilizes an SSL certificate issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. Furthermore, it appears on two security blocklists, including PhishDestroy and OISD. Its current IP address has not been disclosed in available data, and Google Safe Browsing status is not explicitly mentioned.

Currently, the domain is active and poses an elevated risk to users engaging in cryptocurrency transactions. Given its detection by multiple security vendors and presence on security blocklists, users are advised to exercise caution and implement robust security measures, such as using updated antivirus software and remaining vigilant against unsolicited communications. Monitoring tools and blocklist updates should be regularly reviewed to minimize exposure to this threat. Continued vigilance and user education remain critical in mitigating the risks associated with this phishing domain.