lumera-health[.]ai-cryptolist[.]org

This domain, lumera-health.ai-cryptolist.org, is identified as a crypto drainer phishing site targeting users through a deceptive health-themed portal. The site is designed to trick visitors into connecting cryptocurrency wallets, enabling attackers to siphon funds without authorization. The use of a health-related subdomain suggests an attempt to exploit trust in medical or wellness services, a common tactic to lower user vigilance. Analysis indicates the domain was specifically crafted to mimic legitimate platforms, increasing the likelihood of successful compromise for unsuspecting victims. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on April 11, 2026, through Key-Systems GmbH, a registrar frequently observed in phishing operations. VirusTotal detections show 18 out of 95 security vendors flagging the domain as malicious, with additional listings on one security blocklist. The site resolves to the IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the site. The page title 'Just a moment...' is consistent with automated cloud-based protections or cloaking mechanisms used to evade detection. Users who visited lumera-health.ai-cryptolist.org should take immediate action to mitigate potential risks. If any wallet connections were made, assume compromise and transfer remaining assets to a new, secure wallet. Revoke all connected dApp authorizations linked to the site using a blockchain explorer or wallet management tool. Monitor accounts for unauthorized transactions and enable transaction simulation tools to preview wallet interactions before execution. Report the domain to relevant security teams or abuse contacts for further investigation. Regularly update security software and browser extensions to block known phishing domains and prevent future exposure.