crazy-frog-ethereum[.]ai-cryptolist[.]net

This domain is flagged for hosting a crypto wallet drainer targeting Ethereum users, classified as brand impersonation with an elevated risk level. The infrastructure is designed to deceive victims into connecting their wallets to malicious smart contracts, enabling unauthorized fund transfers without explicit transaction approvals. Analysis indicates the domain crazy-frog-ethereum.ai-cryptolist.net was registered through Key-Systems GmbH on April 11, 2026, and resolves to the IP address 104.21.68.219. It is currently offline but was previously detected by 17 out of 95 security vendors on VirusTotal. The domain appears on two security blocklists, specifically PhishDestroy and OISD, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by Google Trust Services, which does not mitigate the underlying malicious intent. Mitigation against this threat requires heightened vigilance from Ethereum users and administrators. Users should verify domain authenticity before interacting with any crypto-related websites, particularly those prompting wallet connections. Administrators are advised to block the domain and its associated IP address (104.21.68.219) at the network level. Additionally, monitoring for similar domains registered through Key-Systems GmbH or resolving to the same IP may help preempt further attacks. Wallet software should be configured to display clear warnings when connecting to unverified domains, and users should be educated on recognizing brand impersonation tactics in the crypto space.