algorix[.]next-cryptolist[.]net

PhishDestroy identifies algorix.next-cryptolist.net as a cryptocurrency phishing domain impersonating Algorix, a legitimate cryptocurrency project. The domain is currently active and poses an elevated risk to potential victims. This threat involves fraudulent attempts to deceive users into revealing sensitive wallet credentials or transferring cryptocurrency under false pretenses.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating limited but noteworthy detection. It resolves to IP address 104.21.64.107 and was registered through Key-Systems GmbH on September 16, 2025. The domain holds a valid SSL certificate issued by Google Trust Services, which may be leveraged to enhance its perceived legitimacy. Despite this, the low blocklist count and minimal detection rate suggest a recently emerged or stealthily operated threat.

While the domain remains active, users and organizations are strongly advised to avoid interacting with algorix.next-cryptolist.net. Security teams should implement network-level blocks against the associated IP address (104.21.64.107) and monitor for any associated malicious infrastructure. If exposure has occurred, affected users should immediately revoke any shared credentials, transfer assets to secure wallets, and report the incident to relevant cryptocurrency platforms or law enforcement. Proactive scanning of endpoints for signs of compromise is recommended.