# aihub.ai-cryptolist.net — SUSPICIOUS

> aihub.ai-cryptolist.net hosts a crypto drainer phishing site with zero VirusTotal detections. Avoid cryptocurrency transactions on this domain immediately.

## Summary
PhishDestroy identifies aihub.ai-cryptolist.net as an active crypto drainer domain designed to deceive users into connecting cryptocurrency wallets or transferring funds to attacker-controlled addresses. The domain mimics legitimate AI or cryptocurrency-related services to exploit trust in emerging tech sectors. Recent threat activity suggests threat actors are leveraging AI hype to distribute malicious payloads, including drainer scripts that silently drain wallet balances upon connection. Users interacting with this domain risk immediate financial loss without explicit confirmation prompts.  This domain was flagged by PhishDestroy with zero VirusTotal detections out of 95 scanners as of detection time, indicating a low detection rate among security vendors despite clear malicious intent. Registered through Key-Systems GmbH on November 05, 2025, the domain resolves to IP 104.21.68.219 and holds a valid SSL certificate from Google Trust Services, increasing its credibility to unsuspecting users. The recent creation date and absence of blocklist entries suggest this campaign is in its early stages, likely targeting users actively searching for AI-powered cryptocurrency tools or early investment opportunities.  If you visited aihub.ai-cryptolist.net, disconnect your wallet immediately and revoke any connected permissions via your wallet’s security settings. Do not interact with wallet connection prompts or transaction requests from this domain. Report the domain to your security team or through official abuse channels like Google Safe Browsing. Clear browser cache and cookies related to cryptocurrency platforms to prevent lingering session persistence. Monitor wallet transactions for unauthorized activity and consider transferring remaining assets to a newly generated wallet address. Always verify the legitimacy of cryptocurrency platforms through official channels before connecting wallets or making transfers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-05 10:05:00
- Registrar: Key-Systems GmbH
- IP: 104.21.68.219

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/aihub.ai-cryptolist.net
- PhishDestroy: https://phishdestroy.io/domain/aihub.ai-cryptolist.net/
- LLM endpoint: https://phishdestroy.io/domain/aihub.ai-cryptolist.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/aihub.ai-cryptolist.net/
Last updated: 2026-04-11