tanuki-inu[.]ai-cryptolist[.]com

The domain tanuki-inu.ai-cryptolist.com has been confirmed as a credential theft phishing site. The domain was registered through Key-Systems GmbH and created on April 11, 2026. Analysis indicates that the threat leverages advanced web technologies such as IPFS, Vue.js, and HTTP/3, which can enhance the site's credibility and functionality.

Technical indicators reveal that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among security researchers regarding its malicious nature. The domain resolves to the IP address 188.114.97.3 and is currently listed on one security blocklist. The SSL certificate is issued by Google Trust Services, which may contribute to user trust, despite the domain's malicious intent. The registrar, Key-Systems GmbH, is a known domain registration service, and the domain's creation date of April 11, 2026, suggests a relatively recent setup, possibly indicating an active campaign.

The domain is currently offline, which may indicate that it has been taken down by authorities or the hosting service. However, the risk remains elevated, as the site could be reactivated at any time. Users are advised to avoid visiting this domain and to report any similar domains to their security providers. Organizations should update their security policies to include this domain in their blocklists and conduct regular security training to educate employees about the risks of credential theft phishing campaigns.