fartgpt[.]ai-cryptolist[.]org

This domain, fartgpt.ai-cryptolist.org, is identified as a generic phishing site targeting cryptocurrency users through deceptive AI-themed branding. Analysis indicates the domain mimics legitimate AI-driven crypto tools, likely deploying a crypto drainer kit to siphon digital assets from victims. The use of "fartgpt" and "ai-cryptolist" in the subdomain suggests an attempt to exploit the popularity of AI and cryptocurrency platforms, tricking users into interacting with malicious smart contracts or fake wallet interfaces.

Infrastructure analysis reveals the following technical indicators: the domain is flagged by 17 out of 95 security vendors on VirusTotal, with a registrar identified as Key-Systems GmbH. It resolves to the IP address 188.114.97.3, a host that may be part of a larger bulletproof or compromised infrastructure. The domain was created on April 11, 2026, an unusually future-dated registration that may indicate an attempt to evade detection or a typo in available records. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. The domain appears on one security blocklist and is assigned a trust score of 0/100 by Gridinsoft, further confirming its malicious nature.

As of the latest verification, fartgpt.ai-cryptolist.org has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. The domain was blocked by PhishDestroy, a security response mechanism, reducing immediate exposure. However, residual risk persists as threat actors may re-deploy the phishing kit under a new domain or IP address. Users are advised to verify the authenticity of AI and crypto-related services before interacting with them, particularly those advertised via unsolicited links. Wallet addresses and smart contracts associated with this domain should be treated as malicious, and any prior interactions should be audited for unauthorized transactions.