crypto618[.]com

The domain crypto618.com was registered on July 02, 2026 through the registrar 22net, Inc. and is currently resolving to the IPv4 address 45.192.213.251. Its authoritative name servers are ns1.22.cn and ns2.22.cn, indicating a hosting relationship with a Chinese DNS provider. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence source has identified malicious activity associated with the name. VirusTotal records show that the domain was scanned by 91 independent security vendors; none of those scanners reported a detection at the time of analysis.

The absence of detections should not be interpreted as evidence of safety, as the domain’s behavior may evade existing signatures or the scans may have occurred before malicious payloads were deployed. The overall status is listed as active, and the risk level remains under investigation, reflecting limited public information about the specific payload or victim interaction model. No page title, SSL certificate details, HTTP response codes, or content analysis have been published, leaving the exact nature of the phishing attempt undefined.

Defenders should consider adding crypto618.com and its resolved IP address to outbound filtering rules, DNS blocklists, and intrusion‑prevention signatures. Continuous monitoring of the IP reputation and any future VirusTotal submissions is advised, as additional detections may emerge. Given the recent creation date and active status, organizations handling cryptocurrency‑related communications should treat any unsolicited messages referencing crypto618.com with heightened scrutiny and enforce multi‑factor authentication for any credential prompts that could be associated with this infrastructure.