cryptop2p[.]live

This domain is flagged as a high-risk credential harvesting phishing site targeting users of peer-to-peer cryptocurrency platforms. Analysis indicates the domain cryptop2p.live is designed to mimic legitimate P2P trading interfaces, tricking victims into submitting login credentials, wallet keys, or personal identification details under false pretenses. The threat type is classified as generic_phishing with a focus on financial fraud and identity theft within the cryptocurrency ecosystem. Infrastructure analysis reveals the domain was registered on October 15, 2025, through GoDaddy.com, LLC, a common registrar for both legitimate and malicious entities. It resolves to the IP address 77.245.76.110, hosted under AS20860 (IOMART CLOUD SERVICES LIMITED) in the United Kingdom. The site employs a Let's Encrypt SSL certificate (R12) to present a false sense of security. Detection metrics show limited but concerning coverage: VirusTotal reports 1 out of 95 security vendors flagging the domain, while one additional security blocklist has listed it. The domain remains active and is currently blocked by at least one threat intelligence feed. Mitigation requires immediate user awareness and technical controls. Organizations should update web filtering rules to block access to cryptop2p.live and its resolving IP 77.245.76.110 at the perimeter. End-users should be educated on recognizing phishing indicators, such as mismatched SSL issuers, recently registered domains, and unsolicited requests for sensitive financial data. Multi-factor authentication should be enforced on all cryptocurrency accounts to reduce the impact of credential compromise. Network monitoring should be enhanced to detect connections to the identified IP or related infrastructure.