kekius-maximus-wtf[.]ai-cryptolist[.]net

The domain kekius-maximus-wtf.ai-cryptolist.net has been identified as a cryptocurrency phishing resource targeting users of digital asset platforms. Analysis indicates the site employs deceptive login portals and wallet interfaces to harvest credentials, private keys, or recovery phrases. As of the latest assessment, the domain is offline, though prior activity suggests it was operational for credential theft and financial fraud. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Key-Systems GmbH, and resolves to the IP address 172.67.198.248. It is flagged by 17 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on two security blocklists and is actively blocked by multiple threat intelligence feeds. The SSL certificate is issued by Google Trust Services, though this does not mitigate the malicious intent of the infrastructure. The page title 'Just a moment...' suggests the use of evasion techniques, such as cloud-based filtering or cloaking, to delay or obscure detection. Current status confirms the domain is offline, reducing immediate risk to end users. However, the infrastructure may reactivate or reappear under similar naming conventions. Organizations and individuals are advised to block the domain and associated IP at the network level. Users should verify the legitimacy of cryptocurrency-related communications and avoid entering credentials on untrusted platforms. Security teams should monitor for related domains or IPs, particularly those registered through the same registrar or resolving to the same infrastructure. If credentials were previously entered on this domain, immediate revocation and replacement of exposed keys or passwords is recommended.