blade[.]ai-cryptolist[.]org

The domain blade.ai-cryptolist.org was registered on 5 November 2025 through the registrar Key-Systems GmbH. DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative name servers are abdullah.ns.cloudflare.com and harlee.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure. VirusTotal records show that 18 of 91 scanning engines have flagged the domain as malicious, providing a moderate detection signal.

The domain is listed on a single external blocklist and has been actively blocked by the PhishDestroy service, confirming that security communities have observed abusive activity associated with the host. No publicly available page title or SSL certificate details have been disclosed, and the exact content served by the site remains unverified. Consequently, the current evidence points to an active generic phishing infrastructure targeting users, but the specific lure or compromised brand cannot be determined from the available data.

Defenders should consider adding the domain and its resolved IP address to deny‑list rules, enforce DNS‑based blocking, and monitor for any new resolution or certificate changes. Continuous observation of the IP reputation and periodic re‑scans on VirusTotal are recommended to capture any evolution in the threat profile.