manyu-bsc[.]ai-cryptolist[.]com

Analysis of manyu-bsc.ai-cryptolist.com indicates a high likelihood of malicious activity. The domain was registered on November 5, 2025 through Key-Systems GmbH, a registrar commonly used by both legitimate and illicit operators. It resolves to the IP address 188.114.96.3 and is served by Cloudflare nameservers aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com, a configuration frequently leveraged to obscure the true hosting environment.

VirusTotal reports that 19 of 91 security vendors flag the domain, demonstrating a measurable detection consensus across multiple scanning engines. In addition, the domain is listed on a public security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing the perception of abuse. No public evidence was found regarding SSL certificate details, HTTP response codes, Safe Browsing status, Open Threat Exchange (OTX) indicators, or the page title of the site, leaving these aspects of the infrastructure unverified.

Consequently, defenders should assume the domain is being used for generic phishing attacks until further forensic analysis can confirm the payload or targeted brands. Recommended mitigations include adding the domain and its resolving IP to network deny lists, updating web filtering and DNS sinkhole policies to block traffic, and monitoring for any outbound connections to the Cloudflare nameservers that could indicate command‑and‑control activity. Continuous re‑assessment is advised, as additional intelligence such as content snapshots, certificate transparency logs, or user‑reported incidents may further clarify the threat vector.