yieldnest[.]ai-cryptolist[.]com

The domain yieldnest.ai-cryptolist.com has been identified as hosting a phishing threat, specifically designed to perform fake login attacks. Analysis suggests the site's infrastructure may have been used to harvest user credentials or sensitive information under fraudulent pretenses, potentially targeting cryptocurrency users given the subdomain 'ai-cryptolist'. There is no explicit mention of a specific drainer kit used in this operation, but the presence of advanced technologies such as IPFS, Vue.js, and HTTP/3 indicates a sophisticated setup potentially aimed at deceiving users into revealing confidential data.

Technical indicators highlight the malicious nature of this domain. The domain was registered through Key-Systems GmbH and resolves to the IP address 188.114.96.3. It was created on April 11, 2026, suggesting it was preemptively prepared for malicious use. Despite having an SSL certificate issued by Google Trust Services, which may falsely reassure users, it has been flagged by 18 out of 95 security vendors on VirusTotal. This domain also appears on one security blocklist and has been specifically blocked by PhishDestroy. The Gridinsoft trust score ranks at a critical 0/100, indicating no trustworthiness.

Currently, the status of yieldnest.ai-cryptolist.com is offline, reducing the immediate threat. However, the previous detection of phishing activity suggests a need for vigilance. Users are advised to remain cautious and ensure their systems and data are secure, as the domain's prior activity indicates a potential for future threats if reactivated or mirrored elsewhere. It is recommended that cybersecurity teams update their blocklists and monitor for any related phishing campaigns that might attempt to resurface using similar domains or tactics.