# web3-ai.cyou — SUSPICIOUS

> PhishDestroy identifies web3-ai.cyou as a crypto drainer phishing site with 0/95 VirusTotal detections. Avoid connecting wallets or entering credentials.

## Summary
PhishDestroy identifies web3-ai.cyou as an active crypto drainer phishing domain designed to trick victims into connecting cryptocurrency wallets or entering recovery phrases. The site mimics legitimate Web3 services to steal digital assets, targeting users through deceptive links or advertisements. If you encountered this domain in a DM, email, or social media post, assume malicious intent—do not interact with it under any circumstances.  This domain was flagged by multiple security vendors including SEAL and MetaMask, with key technical indicators confirming its malicious nature. Registered on March 05, 2026 through Gname.com Pte. Ltd., the domain uses a Let’s Encrypt SSL certificate and resolves to IP address 172.67.133.172. Notably, VirusTotal currently shows 0 detections out of 95 scans, highlighting how new and under-the-radar this threat remains. It has already appeared on two security blocklists, reinforcing its high-risk status.  If you visited web3-ai.cyou or entered any information—especially wallet credentials, seed phrases, or private keys—treat your assets as compromised. Immediately disconnect any connected wallets using tools like WalletConnect or MetaMask’s disconnect feature. Transfer remaining funds to a new, secure wallet not previously exposed to this threat. Scan your device for malware and reset passwords for all crypto-related accounts. Report the domain to your wallet provider and relevant phishing databases to help protect others. Do not reuse compromised credentials anywhere.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-05 05:19:34
- Registrar: Gname.com Pte. Ltd.
- IP: 172.67.133.172

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/web3-ai.cyou
- PhishDestroy: https://phishdestroy.io/domain/web3-ai.cyou/
- LLM endpoint: https://phishdestroy.io/domain/web3-ai.cyou/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web3-ai.cyou/
Last updated: 2026-04-04