optimus-ai[.]ai-cryptolist[.]com

This domain, optimus-ai.ai-cryptolist.com, is identified as a cryptocurrency credential phishing threat designed to harvest wallet logins, private keys, and exchange credentials. The infrastructure targets users of AI-themed crypto platforms, leveraging deceptive branding to trick victims into submitting sensitive authentication details. Analysis indicates the domain was engineered to mimic legitimate cryptocurrency tracking or AI-driven trading services, increasing the likelihood of successful social engineering attacks against crypto investors and traders. Infrastructure analysis reveals the domain was registered through Key-Systems GmbH on April 11, 2026, an unusually future-dated creation that may indicate domain squatting or preemptive registration for malicious use. At its peak, the domain was flagged by 18 out of 95 security vendors on VirusTotal, while appearing on two distinct security blocklists. The SSL certificate was issued by Google Trust Services, providing a false sense of legitimacy to potential victims. The domain held a Gridinsoft trust score of 0/100, reinforcing its classification as a high-risk phishing asset. Users who visited optimus-ai.ai-cryptolist.com should immediately revoke any credentials entered on the site, particularly cryptocurrency wallet passwords, private keys, or API tokens. Monitor linked accounts for unauthorized transactions or access attempts. If financial assets were exposed, report the incident to relevant blockchain analytics platforms and law enforcement cybercrime units. Reset passwords on all platforms where identical credentials were reused, and enable multi-factor authentication where available. Review browser extensions and installed applications for any unauthorized or suspicious software that may have been downloaded during the visit.