sharplink-gaming[.]ai-cryptolist[.]com

This domain is flagged as an active crypto drainer phishing site, designed to harvest credentials and siphon digital assets from victims. The threat level is elevated due to its targeting of cryptocurrency users, a high-value demographic for financial fraud and unauthorized transactions. Analysis indicates the domain is engineered to mimic legitimate crypto platforms, exploiting user trust to execute wallet-draining scripts upon interaction. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Key-Systems GmbH and currently resolves to the IP address 188.114.97.3. Security vendor detections on VirusTotal report 17/95 flags, while the domain appears on one additional security blocklist. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy to phishing infrastructure. The domain is also blocked by PhishDestroy, further corroborating its malicious intent. Mitigation requires immediate blocking of the domain and its resolving IP at the network perimeter. Users should be alerted to the specific threat of crypto drainers, which execute unauthorized transactions upon wallet connection. Organizations handling cryptocurrency transactions should enforce multi-factor authentication and wallet approval workflows to prevent unauthorized access. Endpoint detection rules should be updated to flag interactions with the domain or its associated IP, while security teams monitor for anomalous wallet activity linked to this infrastructure.