cryptamo[.]xyz

The domain cryptamo.xyz is identified as a generic phishing resource specifically designed to impersonate a cryptocurrency tax compliance scanner branded as 'Crypto Tax Pro Bot.' Analysis indicates this infrastructure is engineered to harvest wallet credentials and sensitive financial data from users under false pretenses of tax verification services. The domain currently maintains an offline status following takedown procedures. Infrastructure analysis reveals cryptamo.xyz was registered through NiceNIC International Group Co., Limited on February 21, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. The domain resolves to the IP address 188.114.97.3, a Cloudflare node commonly exploited for anonymization. Security telemetry shows 6 of 95 vendors on VirusTotal have flagged this domain as malicious, while Gridinsoft assigns a trust score of 0/100. The resource appears on four distinct security blocklists and is actively blocked by multiple wallet protection mechanisms, including MetaMask and ScamSniffer. The page title 'Crypto Tax Pro Bot | Crypto Tax Compliance Scanner' directly mimics legitimate tax reporting tools to enhance credibility. Current status indicates the domain has been rendered inaccessible, though residual risk persists due to potential re-registration or migration to alternative infrastructure. Users are advised to verify all cryptocurrency-related tools through official vendor portals and avoid interacting with domains lacking verifiable SSL certificates or established registration histories. Security teams should monitor for similar phishing patterns using the identified IP range and registrar profile, particularly those employing Cloudflare for obfuscation.