kizuna[.]next-cryptolist[.]net

The domain kizuna.next-cryptolist.net has been identified as a generic phishing site, specifically designed to mimic legitimate login pages and steal user credentials. The domain does not appear to be associated with a specific brand or cryptocurrency, but its primary function is to deceive users into entering their login details, which can then be harvested by the threat actors for malicious purposes.

Analysis indicates that the domain has a VirusTotal detection score of 18/95, with 18 security vendors flagging it as a potential threat. The domain is registered through Key-Systems GmbH, and it resolves to the IP address 172.67.181.166. The domain was created on April 11, 2026, and its SSL certificate is issued by Google Trust Services. The Gridinsoft trust score for this domain is 0/100, indicating a high level of suspicion. Additionally, the domain appears on one security blocklist, and it is blocked by PhishDestroy.

The domain is currently offline, which suggests that it has been taken down either by the registrar or by security teams in response to the detected phishing activity. Despite this, the infrastructure and registration details remain a point of concern. The elevated risk level and the number of security vendors flagging the domain indicate that there is a significant potential for harm if users were to engage with it. Security teams should monitor for any reactivation of the domain and ensure that affected users are informed and take necessary precautions to secure their accounts and credentials.