maker[.]ai-cryptolist[.]com

This domain, maker.ai-cryptolist.com, was registered on April 11, 2026 through Key-Systems GmbH and is currently hosted behind Cloudflare infrastructure (nameservers aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com). DNS resolution points to IP 188.114.97.3, which is identified as a Cloudflare, Inc. address located in Canada. The site presents an HTTP 302 redirect and serves a TLS certificate issued by Google Trust Services under the WE1 label, indicating a valid SSL chain. HTTP/3 support is observed, confirming modern CDN usage. The page title returned by the server is “Just a moment…”, and no further content has been disclosed in the available intelligence. VirusTotal reports that 18 of 94 security vendors flag the domain, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The domain is listed on a single public blocklist and has been blocked by the PhishDestroy service. Classification from intelligence sources identifies the campaign as a high‑risk crypto‑drainer phishing operation. While the exact victim brand or lure is not visible from the current data, the combination of a deceptive redirect, reputable certificate, and low trust score suggests an attempt to harvest cryptocurrency credentials. Defenders should add maker.ai-cryptolist.com to deny‑list rules, monitor DNS queries for the associated IP address, and enforce endpoint controls that block connections to Cloudflare‑hosted malicious domains. Continuous re‑evaluation is advised as additional artifacts become available.