bnbull[.]next-cryptolist[.]net

This domain presents an elevated risk as a crypto drainer, a specific type of phishing designed to steal cryptocurrency wallet credentials and drain assets. PhishDestroy identified bnbull.next-cryptolist.net as a generic phishing threat impersonating a legitimate crypto platform, targeting users with fake login pages to harvest private keys. The domain was created on April 11, 2026, and registered through Key-Systems GmbH, a German registrar often abused for malicious domains. It resolves to IP 172.67.181.166, with an SSL certificate from Google Trust Services (WE1) that falsely assures visitors of security. VirusTotal data shows only 2 out of 95 security vendors flagged the domain as malicious, a low detection rate that underscores its stealthy nature. Additionally, it appears on one security blocklist, and trust scores from community sources remain low due to its recent creation and reported phishing activity.

To protect against this crypto drainer, users should never click links in unsolicited messages claiming to be from cryptocurrency platforms, especially if the URL contains suspicious subdomains or misspellings like "next-cryptolist." Always verify the official domain by typing it manually into the browser. Enable two-factor authentication on all crypto accounts and use a hardware wallet for storage. If credentials were accidentally entered on this site, immediately transfer funds to a new wallet and revoke any token approvals. Report the domain to your email provider and crypto exchange to help block further attacks.