dexcheck[.]ai-cryptolist[.]com

Analysis of the domain dexcheck.ai-cryptolist.com indicates it is an active phishing infrastructure targeting users in the cryptocurrency or analytics sector. The domain was registered on April 11, 2026, through Key-Systems GmbH and currently resolves to the IP address 188.114.96.3. Infrastructure analysis reveals the use of Cloudflare services, including HTTP/3, and an SSL certificate issued by Google Trust Services, which is consistent with tactics used to evade detection and appear legitimate. The domain is flagged by one security blocklist and has been identified as malicious by 18 of 95 security vendors in a recent scan. The page title, 'Just a moment...', is a common indicator of Cloudflare-protected phishing pages, often used to obscure the true content of the site until the visitor is verified or redirected. No specific brand impersonation has been confirmed in the available data, though the inclusion of 'dexcheck' and 'crypto' in the domain suggests a potential focus on cryptocurrency-related services or platforms. Defenders should treat this domain as high-risk and implement blocking measures at the network and endpoint levels. Given its recent registration and active status, monitoring for additional indicators of compromise or related infrastructure is recommended. The exact content and targeting of the phishing site remain unconfirmed, and further analysis is required to determine the full scope of its operations.