devap-ai[.]ai-cryptolist[.]org

This domain, devap-ai.ai-cryptolist.org, is identified as a targeted credential theft operation designed to compromise cryptocurrency wallet credentials. Analysis indicates the domain mimics legitimate AI-powered crypto trading or analytics platforms, leveraging social engineering tactics to trick users into entering sensitive login details or private keys. The threat specifically targets individuals engaged in cryptocurrency transactions, posing a high risk of financial loss through unauthorized wallet access or fund transfers. Infrastructure analysis reveals the domain was registered through Key-Systems GmbH on April 11, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or appear legitimate. Security vendors on VirusTotal flagged the domain at a rate of 16/95, with detections spanning multiple categories including phishing and malicious URL. The domain appears on one security blocklist and employs Cloudflare for hosting, alongside HTTP/3 protocol support, which may obscure traffic analysis. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy to malicious sites. Users who visited devap-ai.ai-cryptolist.org should immediately revoke any entered credentials or private keys, particularly for cryptocurrency wallets. Monitor linked accounts for unauthorized transactions and enable multi-factor authentication where available. If financial loss is suspected, report the incident to relevant authorities and cryptocurrency exchange support teams. Avoid reusing passwords or keys from compromised accounts and verify the legitimacy of any AI or crypto-related services through official channels before interaction.