any-inu[.]ai-cryptolist[.]net

PhishDestroy identifies any-inu.ai-cryptolist.net as an active cryptocurrency drainer phishing domain designed to trick users into connecting crypto wallets. The domain mimics legitimate cryptocurrency tools (likely leveraging 'ai-cryptolist' branding) to deceive victims into authorizing unauthorized wallet transactions. While no specific drainer kit has been publicly documented for this variant, the infrastructure suggests affiliation with broader 'cryptolist'-themed scams observed in Q4 2025. The domain's recent registration and minimal detection signals a highly targeted, possibly emerging threat.

This domain was flagged as generic_phishing with a current risk status of under_investigation. Technical indicators include a VirusTotal detection score of 2/95 (0% flagged as malicious by 95 engines), registration through Key-Systems GmbH, and resolution to IP 172.67.198.248. The domain was created on November 05, 2025, and secured with a Google Trust Services SSL certificate. At time of writing, the domain remains active and undetected by major blocklists, posing a stealthy threat to unsuspecting cryptocurrency users.

As of this report, the domain's status is active, with no recorded takedown or deactivation. No response actions from hosting or registrant have been documented, leaving the risk level unresolved. Users are advised to avoid interacting with any-inu.ai-cryptolist.net and report suspected encounters promptly. Given the absence of blocklist coverage and reliance on obscure registrant data, this domain represents a critical blind spot in current threat intelligence. Immediate prevention includes browser-based domain blocking and wallet transaction simulation checks for connected domains.