manyu[.]ai-cryptolist[.]com

Analysis indicates that manyu.ai-cryptolist.com was registered on 11 April 2026 through Key-Systems GmbH and uses Cloudflare nameservers aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com. The domain resolves to IP 188.114.96.3, an address owned by Cloudflare, Inc. located in Canada. HTTP requests return a 302 redirect and the only observed page title is "Just a moment…". The TLS certificate is issued by Google Trust Services under the WE1 label, confirming a valid SSL chain. VirusTotal scans show 2 of 94 security vendors flag the domain, and Gridinsoft assigns a trust score of 0/100. The domain appears on a single public blocklist and is actively blocked by PhishDestroy. The threat type is classified as a crypto scam with a high risk rating. Current activity is marked as active. No additional content analysis is available, so the specific payload or credential‑harvesting mechanisms remain unknown. Defenders should treat the domain as malicious, block network resolution to 188.114.96.3, add the FQDN to deny‑list rules, and monitor for related command‑and‑control patterns. Continuous re‑scanning and correlation with other indicators of compromise are recommended to capture any evolution of the infrastructure.