degen-the-otter[.]ai-cryptolist[.]org

This domain, degen-the-otter.ai-cryptolist.org, operates as a phishing site targeting cryptocurrency users by impersonating legitimate wallet services. The site is designed to harvest credentials, private keys, or seed phrases from victims under the guise of a crypto-related service, likely leveraging social engineering tactics such as fake airdrops, token claims, or wallet recovery prompts. The use of Cloudflare and HTTP/3 suggests an attempt to obscure malicious activity and bypass traditional network-based detection mechanisms. Analysis of the domain reveals multiple indicators of malicious intent. The domain was registered on April 11, 2026, through Key-Systems GmbH, and is currently flagged by 17 out of 95 security vendors on VirusTotal. It appears on one security blocklist and was previously blocked by at least one anti-phishing system. The SSL certificate is issued by Google Trust Services, which, while legitimate, is frequently exploited by threat actors to lend false credibility to malicious sites. The domain has a Gridinsoft trust score of 0/100, further confirming its high-risk nature. Users who visited degen-the-otter.ai-cryptolist.org should assume their credentials or private keys may have been compromised. Immediate actions include revoking any active sessions, transferring funds to a new wallet, and monitoring all linked accounts for unauthorized transactions. If any sensitive information was entered, users should enable multi-factor authentication on all crypto-related accounts and consider reporting the incident to relevant financial or cybersecurity authorities. The domain is currently offline, but users should remain vigilant for similar phishing attempts using variations of the domain name or impersonating other crypto services.