quasar-social[.]ai-cryptolist[.]net

The domain quasar-social.ai-cryptolist.net is flagged as a generic phishing site, specifically impersonating a cryptocurrency login page. There is no evidence of a specific drainer kit being used, but the domain is designed to trick users into providing sensitive information.

Infrastructure analysis reveals that the domain resolves to the IP address 172.67.198.248 and was created on April 11, 2026. It is registered through Key-Systems GmbH and uses an SSL certificate from Google Trust Services. The domain appears on one security blocklist and has been flagged by 17 out of 95 security vendors on VirusTotal. The page title is 'Just a moment...', which is often used by phishing sites to delay users while the site loads additional malicious content or redirects them to a different page.

The domain is currently offline, which reduces the immediate risk. However, it remains important to monitor for any reactivation. Users are advised to avoid entering any credentials or personal information on any site that appears suspicious or redirects unexpectedly. Organizations should ensure that their security policies and user training programs are updated to include this domain and similar threats. The Gridinsoft trust score of 0/100 further underscores the domain's high risk level, and it is recommended that all network traffic to this domain be blocked.