cz-broccoli[.]next-cryptolist[.]net

This domain is identified as a crypto wallet drainer, specifically designed to siphon cryptocurrency from victims by impersonating legitimate crypto-related services. Analysis indicates the infrastructure is engineered to exploit users through deceptive transaction prompts or fake wallet interfaces, tricking them into authorizing transfers to attacker-controlled addresses. The domain’s design and naming convention suggest a focus on users of decentralized finance (DeFi) platforms or crypto list services, where urgency and familiarity are leveraged to bypass scrutiny. Technical evidence confirms the domain’s malicious intent. The domain was registered on April 11, 2026, through Key-Systems GmbH, a registrar frequently associated with transient malicious domains. It appears on one security blocklist and is flagged by 18 out of 95 security vendors on VirusTotal, indicating a consensus on its harmful nature. The SSL certificate issued by Google Trust Services provides a veneer of legitimacy, which may deceive users into trusting the site. Additionally, the domain’s Gridinsoft trust score of 0/100 further corroborates its classification as a high-risk threat. Users who visited cz-broccoli.next-cryptolist.net or interacted with its content should assume their cryptocurrency wallets are compromised. Immediately revoke any suspicious smart contract approvals or token allowances using a wallet management tool. Transfer remaining assets to a new, secure wallet and monitor all connected accounts for unauthorized transactions. Enable multi-factor authentication on all crypto-related platforms and review recent transaction histories for anomalies. If credentials or private keys were entered, treat all associated accounts as breached and initiate recovery protocols. Report the incident to relevant blockchain security teams or fraud reporting platforms to aid in tracking and mitigating further abuse.