gummy[.]v2-cryptolist[.]org

The domain gummy.v2-cryptolist.org was a generic phishing site designed to deceive users into disclosing sensitive information. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, gummy.v2-cryptolist.org has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators show that gummy.v2-cryptolist.org was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Kaspersky. The domain was registered through Key-Systems GmbH on August 15, 2024, and resolved to the IP address 198.18.0.130. It appeared on three security blocklists: PhishDestroy, ScamSniffer, and Enkrypt. No SSL certificate was issued for the domain, and its observed page title was 'v2-cryptolist.org'. Nameservers were ns2.expirationwarning.net and ns6.expirationwarning.net. Gridinsoft assigned a trust score of 0 out of 100.

Users who visited gummy.v2-cryptolist.org should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts. If financial or crypto-related details were exposed, consider revoking token approvals and transferring funds to a new wallet as a precaution.