cryptaspie[.]io

Analysis of www.cryptaspie.io as of 2026-08-04 indicates that the domain remains active and is classified as a generic phishing threat. The domain was registered through Infomaniak Network SA on 2022-01-10. Its authoritative name servers are ns1.wepax.com, ns2.wepax.com, and ns3.wepax.com, which are associated with the hosting provider that resolves the domain to IP address 195.201.253.154. The IP belongs to a hosting network that has not been flagged by public reputation services beyond a single entry on a security blocklist.

The domain is listed on one blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one defensive product is aware of its malicious nature. VirusTotal has processed the domain with 91 vendor engines, none of which reported detections; however, the absence of detections does not constitute evidence of benign behavior. No additional data such as SSL certificate details, HTTP response codes, Safe Browsing status, OTX indicators, or page title have been disclosed. Consequently, the confidence in the threat assessment rests on the registrar information, name server configuration, blocklist presence, and the fact that an active phishing blocklist has flagged the domain.

Defenders should continue to block the domain at the DNS and proxy layers, monitor outbound connections to the IP 195.201.253.154, and consider adding the domain to internal deny lists. Further investigation, including live content retrieval and sandbox analysis, is recommended to determine the specific phishing payload and any credential harvesting mechanisms. Until additional evidence is gathered, the domain should be treated as malicious and kept under observation.