aethra-ai[.]entry-cryptolist[.]app

PhishDestroy identifies aethra-ai.entry-cryptolist.app as a live cryptocurrency investment phishing domain actively distributing fraudulent token listings. The domain specifically impersonates Aethra AI services to deceive users into connecting wallets or transferring funds under the guise of exclusive presale opportunities. Intelligence confirms the campaign remains active as of seed 95e169, with operators continuously updating lure content to evade detection. This domain resolves to IP address 188.114.97.3 and operates under a Google Trust Services SSL certificate to enhance credibility. VirusTotal currently shows 0 detections out of 95 scanning vendors, indicating the infrastructure remains under the radar of major security platforms. WHOIS records reveal the domain was created recently and uses bulletproof hosting infrastructure; however, registrar details remain redacted to obscure attribution. The absence of detections combined with the use of a trusted CA certificate significantly increases the risk of successful user deception and financial loss. Given the active status and low detection rate, users should immediately block access to aethra-ai.entry-cryptolist.app and avoid any interaction with linked “presale” offers. Enterprises are advised to update browser blocklists and firewall rules to include the IP 188.114.97.3 and the domain. Security teams should also scan endpoints for wallet connection attempts or redirects to this domain. Continuous monitoring is required due to the domain’s high-risk classification and evolving lures aimed at cryptocurrency investors.