btc-ai-agent[.]ai-cryptolist[.]org

The domain btc-ai-agent.ai-cryptolist.org was registered through Key-Systems GmbH on November 5, 2025 and currently resolves to the IP address 188.114.97.3. Its authoritative name servers are abdullah.ns.cloudflare.com and harlee.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy filtering service, suggesting that at least one reputable anti‑phishing feed has identified it as malicious.

VirusTotal analysis shows that 17 out of 91 scanned security vendors have flagged the domain, providing independent corroboration of its malicious reputation. No public information about the site’s SSL certificate, HTTP response codes, or page title is available, and the content has not been captured in the current intelligence set, leaving the exact visual or functional characteristics of the landing page unknown. Given the observed indicators—recent registration, Cloudflare name servers, blocklist presence, active PhishDestroy block, and multiple vendor detections—defenders should treat the domain as hostile.

Network defenders are advised to block DNS resolution and HTTP(S) traffic to 188.114.97.3, add the domain to local deny lists, and monitor for any outbound connections that may attempt to reach the same host. Incident response teams should also consider isolating any internal hosts that have recently accessed the domain for further forensic analysis, as the lack of detailed page content suggests the site may be used for credential harvesting or other phishing‑related activities.