dagestan-and-forget[.]ai-cryptolist[.]com

Analysis shows that dagestan-and-forget.ai-cryptolist.com was registered on April 11, 2026 through Key-Systems GmbH and is currently active. The domain resolves to IP 188.114.96.3, which is hosted by Cloudflare, Inc. in Canada and uses the nameservers aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com. The site presents a HTTP 403 response and serves a certificate issued by Google Trust Services under the WE1 authority. Threat intelligence classifies the activity as a crypto scam and the domain appears on one external blocklist, having been blocked by PhishDestroy. VirusTotal scans report 18 of 94 security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 out of 100. These indicators suggest a high‑risk malicious infrastructure targeting cryptocurrency‑related victims. Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as the page content has not been examined beyond the title "Just a moment...". Defenders should block the domain and its associated IP at perimeter and DNS layers, monitor for outbound connections to the Cloudflare‑hosted address, and update detection rules to include the observed certificate issuer and nameserver pattern. Continuous re‑evaluation is advised should additional indicators such as payload hashes or phishing templates become available.