alkimicampus[.]com

The domain alkimicampus.com has been identified as a cryptocurrency phishing site specifically designed to impersonate Alkimi AI, a blockchain-based advertising platform. Analysis indicates the site is engineered to deceive users into disclosing sensitive credentials, likely targeting cryptocurrency wallet information or private keys. As of the latest assessment, the domain has been taken offline, though prior activity remains a documented threat. Infrastructure analysis reveals the domain was registered on April 04, 2026, through Spaceship, Inc., a registrar commonly associated with newly established malicious domains. It resolved to the IP address 104.21.54.126, a Cloudflare-associated endpoint frequently exploited to obfuscate hosting origins. The domain appears on four distinct security blocklists, including MetaMask and PhishDestroy, and is flagged by 5 of 95 security vendors on VirusTotal. The SSL certificate issued by Let’s Encrypt further suggests an attempt to mimic legitimate services, while the Gridinsoft trust score of 0/100 reinforces its malicious classification. The page title, 'Alkimi AI,' directly aligns with the impersonated brand, confirming the targeted nature of the campaign. Current status confirms the domain has been rendered inaccessible, though residual risk persists for users who may have interacted with it prior to takedown. Organizations and individuals are advised to block the domain and associated IP at the network level, revoke any credentials potentially exposed through the site, and monitor for unauthorized transactions. Security teams should review logs for connections to 104.21.54.126 between April 2026 and the takedown date. Users are urged to verify domain authenticity via official channels before engaging with cryptocurrency-related platforms.