spacecat[.]ai-cryptolist[.]com

The domain spacecat.ai-cryptolist.com was registered on April 11, 2026 through Key-Systems GmbH and is hosted behind Cloudflare infrastructure (nameservers aragorn.ns.cloudflare.com and wanda.ns.cloudflare.com). DNS resolution points to IP 188.114.96.3, which belongs to Cloudflare, Inc. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and responds with HTTP 302 redirects. Technical fingerprints show the presence of IPFS, Vue.js, Cloudflare services, and HTTP/3 support. The only observable page element is the title "Just a moment..."; no additional content has been publicly disclosed. Threat intelligence classifies the site as a high‑risk crypto scam employing the Seed Phrase Phishing kit. It is currently active, has been blocked by PhishDestroy, carries a Gridinsoft trust score of 0/100, and appears on one security blocklist. VirusTotal analysis records 18 detections out of 94 scanning engines. While the exact phishing landing page has not been captured, the combination of a recent creation date, low trust score, use of a known seed‑phrase kit, and multiple vendor detections indicate a deliberate attempt to harvest cryptocurrency seed phrases. Defenders should add spacecat.ai-cryptolist.com to blocklists, monitor for related C2 or credential‑exfiltration traffic, and consider sink‑holing the domain to gather further artifacts. Ongoing observation is recommended to confirm any additional infrastructure or victim targeting patterns.