aevonft[.]xyz

This domain, aevonft.xyz, operates as a crypto drainer, a type of malicious infrastructure designed to automatically siphon cryptocurrency from connected wallets. Victims are typically lured through deceptive NFT or token offers, fake airdrops, or fraudulent investment schemes. Once a user connects their wallet to the site, the drainer executes unauthorized transactions, transferring assets to attacker-controlled addresses without consent. The threat is particularly severe due to its automation and irreversibility, often resulting in total loss of funds from compromised wallets. Analysis indicates the domain is actively malicious, with 5 out of 95 security vendors on VirusTotal flagging it as harmful. Registered on May 18, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to 188.114.97.3, a CloudFlare IP address located in Canada. The site uses a Let's Encrypt SSL certificate (serial number E7), which provides encryption but does not validate legitimacy. Despite appearing on one security blocklist, the domain remains operational, suggesting ongoing abuse. If you have visited aevonft.xyz or connected a wallet to it, immediately disconnect the wallet from all dApps and revoke any suspicious token approvals using a blockchain explorer or wallet management tool. Transfer remaining assets to a new, secure wallet and monitor all connected accounts for unauthorized transactions. Report the domain to your wallet provider and relevant security platforms to aid in takedown efforts. Avoid interacting with similar sites promising free tokens or NFTs, and verify all links through official project channels before engagement.