oglong[.]next-cryptolist[.]net

The domain oglong.next-cryptolist.net is currently active and classified as a high‑risk generic phishing site. It was registered on April 11, 2026 through Key‑Systems GmbH and first appeared on a security blocklist on the same day. The site returns an HTTP 302 redirect and presents the page title “CRYPTOLIST”, but no further content analysis is available. Infrastructure analysis shows the domain resolves to the Cloudflare edge address 104.21.64.107, located in Canada. Cloudflare’s DNS service is used, with authoritative nameservers hunts.ns.cloudflare.com and nena.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services under the WE1 designation, indicating a valid HTTPS endpoint. Detected technologies include IPFS, Vue.js, Cloudflare, and HTTP/3, suggesting a modern web stack. Reputation signals are strong. The domain appears on one public blocklist and is actively blocked by PhishDestroy. VirusTotal reports 2 detections out of 95 scanned security vendors, and Gridinsoft assigns a trust score of 0 out of 100, confirming a malicious classification. These indicators collectively reinforce the high‑risk assessment. Defenders should immediately add oglong.next-cryptolist.net to network blocklists and enforce DNS filtering to prevent resolution. Continuous monitoring of the associated IP 104.21.64.107 is advised, as Cloudflare may host additional malicious payloads under the same edge. Incident response teams should treat any traffic to this domain as hostile and consider sandbox analysis if content is retrieved.