cmx-agent[.]ai-cryptolist[.]com

PhishDestroy assesses cmx-agent.ai-cryptolist.com as elevated risk due to its active status and specific threat type: a cryptocurrency drainer designed to steal wallet credentials. This domain impersonates legitimate crypto services to trick users into connecting their wallets, thereby draining funds. The investigation reveals several concerning indicators. VirusTotal shows 2 out of 95 security vendors flagging the domain, with one blocklist already listing it. The domain resolves to IP 188.114.97.3 and was registered on April 11, 2026, through Key-Systems GmbH, a registrar sometimes associated with low-quality registrations. Its SSL certificate is issued by Google Trust Services (WE1), which is common for both legitimate and malicious sites, so this does not indicate safety. The domain is relatively new, suggesting it may still be in early deployment stages. To protect against this crypto drainer, users should never connect their crypto wallets to unknown websites, especially those with misspelled or suspicious domain names like this one. PhishDestroy recommends using a hardware wallet for transactions and always verifying the official URL of crypto platforms before interacting. Additionally, enabling two-factor authentication and regularly monitoring wallet activity can help detect unauthorized transactions early.