# agenda-47.next-cryptolist.net — SUSPICIOUS

> agenda-47.next-cryptolist.net is a crypto drainer phishing domain with 0/95 detections on VirusTotal. Do not interact with this site.

## Summary
agenda-47.next-cryptolist.net has been flagged by PhishDestroy as an active crypto drainer phishing domain impersonating crypto service Cryptolist. The domain resolves to IP 104.21.64.107 and currently exhibits a high-risk threat profile with no detections recorded on VirusTotal as of the latest scan. Its use of a Google Trust Services SSL certificate suggests an attempt to appear legitimate, though the absence of detections indicates this threat is still under investigation by security vendors. Given the domain's active status and the specific nature of its threat, users are strongly advised to avoid interaction and report any suspicious activity immediately.  This domain was flagged with a unique seed identifier 5657fb and exhibits several technical indicators of malicious intent. It resolves to IP 104.21.64.107, a known hosting provider frequently associated with crypto drainer campaigns. The domain's SSL certificate is issued by Google Trust Services, a tactic commonly used to evade browser-based warnings. As of the latest assessment, VirusTotal reports 0/95 detections, indicating that mainstream security tools have not yet flagged this domain. The domain's infrastructure suggests it is part of a broader campaign targeting cryptocurrency users, leveraging the trustworthiness of cryptocurrency services like Cryptolist to deceive victims.  To mitigate the risk posed by agenda-47.next-cryptolist.net, users should immediately block the domain and IP address 104.21.64.107 at the network level. If you have already interacted with this domain, disconnect your device from the internet to prevent further unauthorized transactions. Revoke any connected cryptocurrency wallet permissions and scan your device for malware using reputable antivirus software. Report this domain to your local cybersecurity authorities and cryptocurrency platforms to aid in its takedown. Always verify URLs and use hardware wallet confirmations for transactions to prevent crypto drainer attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.21.64.107

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/agenda-47.next-cryptolist.net
- PhishDestroy: https://phishdestroy.io/domain/agenda-47.next-cryptolist.net/
- LLM endpoint: https://phishdestroy.io/domain/agenda-47.next-cryptolist.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/agenda-47.next-cryptolist.net/
Last updated: 2026-04-11