prophex[.]ai-cryptolist[.]com

PhishDestroy identifies prophex.ai-cryptolist.com as an elevated-risk crypto drainer, engineered to deceive cryptocurrency enthusiasts into connecting their wallets and surrendering funds. This domain impersonates the legitimate CRYPTOLIST platform, a known brand in the crypto space, to lend an air of authenticity to its malicious scheme. The threat type is a crypto drainer, which operates by tricking users into signing transactions that drain their digital assets.

Technical analysis reveals that VirusTotal flagged this domain with 2 out of 95 security vendors detecting malicious activity, indicating limited but notable recognition. The domain was registered through Key-Systems GmbH and resolves to IP address 188.114.96.3. It was created on April 11, 2026, and currently appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services under the WE1 certificate, which is legitimate but commonly abused by phishing sites. The domain is currently offline, suggesting it may have been taken down or is temporarily inactive.

Users are strongly advised to avoid any interaction with this domain or similar variants. If a wallet connection was made, immediately revoke permissions via the blockchain explorer or a token approval checker. Enable two-factor authentication on all crypto accounts and monitor for unauthorized transactions. Report any encounters to security teams and block the domain at the network level. Stay vigilant against unsolicited prompts to connect wallets or sign transactions, especially those mimicking known platforms like CRYPTOLIST.