cerebro-protocol[.]ai-cryptolist[.]org

This domain cerebro-protocol.ai-cryptolist.org was registered on April 11 2026 through Key-Systems GmbH and remains active. Infrastructure analysis reveals Cloudflare nameservers abdullah.ns.cloudflare.com and harlee.ns.cloudflare.com along with resolution to IP address 188.114.97.3 located in Canada. The associated SSL certificate is issued by Google Trust Services under the WE1 profile. The domain carries a phishing kit classification of Seed Phrase Phishing and appears on one security blocklist.

The page returns an HTTP status of 302 with a title of Just a moment... which is consistent with intermediary protection layers. Detection metrics include a Gridinsoft trust score of 0 out of 100 and flagging by three out of 95 vendors on VirusTotal along with explicit blocking by PhishDestroy. These indicators align with the reported generic_phishing threat type focused on cryptocurrency wallet credentials.

Uncertainty remains regarding the precise landing content after the redirect due to protection mechanisms in place. The short registration-to-detection interval and use of Cloudflare infrastructure are noted but do not by themselves confirm intent without additional behavioral data. The combination of low trust scores and kit classification supports the high risk assessment.

Defenders should block the domain and the resolving IP at network perimeters. Organizations are advised to monitor DNS queries for the listed nameservers in conjunction with similar crypto-related hostnames and to issue user guidance against supplying seed phrases on any unsolicited sites. Continued observation of HTTP 302 responses from the address is recommended to track potential infrastructure changes.