spongebob-bsc[.]ai-cryptolist[.]com

This domain is flagged for elevated-risk cryptocurrency phishing, targeting users through deceptive smart contract or token-related lures. Analysis indicates the infrastructure was designed to mimic legitimate blockchain services, likely exploiting the "BSC" (Binance Smart Chain) reference in the domain name to trick victims into disclosing wallet credentials or approving malicious transactions. Infrastructure analysis reveals the domain spongebob-bsc.ai-cryptolist.com was registered on April 11, 2026, through Key-Systems GmbH. It resolves to the IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services, which may lend false legitimacy. The domain appears on one security blocklist and is flagged by 18 out of 95 security vendors on VirusTotal. Additional trust assessments, such as a Gridinsoft trust score of 0/100, further corroborate its malicious classification. The page title "Just a moment..." suggests the use of Cloudflare or similar proxy services to obfuscate backend infrastructure. Mitigation for cryptocurrency phishing threats involves immediate domain isolation and credential rotation for any exposed accounts. Users should revoke smart contract approvals for any interactions with this domain via blockchain explorers or wallet security tools. Network-level protections, such as DNS filtering or endpoint detection rules, should be updated to block resolution of this domain and its associated IP. Organizations handling cryptocurrency transactions should conduct retroactive scans for connections to 188.114.97.3 and monitor for related phishing domains registered through the same registrar or resolving to the same IP range.