vite[.]next-cryptolist[.]net

This domain, vite.next-cryptolist.net, was operational as a cryptocurrency credential phishing site targeting users of digital asset platforms. The infrastructure presented a fraudulent interface mimicking legitimate cryptocurrency listing services, likely designed to harvest wallet credentials, private keys, or multi-factor authentication codes. The page title 'CRYPTOLIST' and the use of modern web frameworks suggest an attempt to appear credible while exploiting users seeking crypto-related services.

Analysis indicates the domain was flagged by 18 out of 95 security vendors on VirusTotal, signaling moderate but consistent detection across the threat intelligence community. Registered on April 11, 2026, through Key-Systems GmbH, the domain resolved to IP address 172.67.181.166 and was protected by Cloudflare’s network infrastructure. It appeared on one security blocklist and was assigned a trust score of 0/100, further corroborating its malicious intent. The SSL certificate issued by Google Trust Services provided a veneer of legitimacy, while technologies such as IPFS and Vue.js were employed to enhance the site’s functionality and evade basic detection mechanisms.

Users who accessed vite.next-cryptolist.net should immediately revoke any credentials or private keys entered on the site. Wallets associated with the interaction should be treated as compromised, and funds should be transferred to a new, secure wallet. Monitoring for unauthorized transactions is critical, and affected individuals should enable additional authentication layers on all cryptocurrency accounts. System scans for malware are recommended, as phishing sites may deploy secondary payloads to maintain persistence or exfiltrate data.