bsquared-network[.]ai-cryptolist[.]net

The domain bsquared-network.ai-cryptolist.net was registered on April 11, 2026 through Key-Systems GmbH and currently resolves to the Cloudflare‑owned IP address 172.67.198.248, which is geolocated to CA. The site presents a HTTP 302 redirect and serves a page whose title is "Just a moment...". TLS termination uses a Google Trust Services certificate (WE1). Automated scans indicate the presence of the Seed Phrase Phishing kit and a Gridinsoft trust score of 0/100, suggesting a high likelihood of malicious intent. VirusTotal analysis shows 18 of 94 security vendors flag the domain, and the domain appears on one external blocklist. Infrastructure fingerprints include Cloudflare services, HTTP/3, Vue.js, and IPFS components, with authoritative nameservers melissa.ns.cloudflare.com and miles.ns.cloudflare.com. The site is actively blocked by PhishDestroy. While the exact phishing payload has not been publicly disclosed, the combination of a low trust score, known phishing kit, multiple vendor detections, and active blocklist inclusion confirms a high‑risk profile. Defenders should block the domain and its associated IP, monitor for related DNS queries, and incorporate the indicator set (domain, IP, TLS certificate fingerprint, and nameservers) into threat‑intelligence feeds. Ongoing observation is advised to detect any evolution of the infrastructure or additional campaigns leveraging the same assets.