agi-alpha-agent[.]entrance-cryptolist[.]com

PhishDestroy identifies agi-alpha-agent.entrance-cryptolist.com as an active crypto-phishing domain with elevated risk, specifically targeting users through a fraudulent agent interface. The domain mimics legitimate crypto-assistant services to trick visitors into divulging sensitive wallet details or installing malware. Recent telemetry shows this impostor registered on June 17, 2024, and resolves to 188.114.96.3, a server hosting multiple suspicious endpoints. This domain was flagged by only 1 out of 95 VirusTotal security vendors and carries a certificate issued by Google Trust Services, which attackers often abuse to appear legitimate. Registered through Key-Systems GmbH, the domain’s recent creation aligns with the rise of crypto-focused scams leveraging brand impersonation. Despite low initial detection, the combination of a freshly minted domain, questionable infrastructure, and a deceptive naming scheme underscores a credible threat to cryptocurrency users seeking automated assistance or advisory services. Users who visited this domain should immediately check browser extensions for unauthorized permissions, review wallet transaction history for anomalies, and consider rotating private keys if any credentials were entered. Disable autofill for crypto-related sites and clear cookies related to wallet or exchange domains. Report the domain to your browser's safe-browsing program and monitor financial accounts for irregular activity. Do not reuse passwords across crypto platforms, and consider using hardware wallets with transaction verification to reduce exposure to credential-stealing schemes.