ang-ju[.]gate-cryptolist[.]com

ang-ju.gate-cryptolist.com operates as a crypto drainer scam site designed to steal cryptocurrency assets from unsuspecting victims. The threat involves the unauthorized siphoning of digital assets through deceptive wallet connection prompts, a common tactic used by cybercriminals to drain funds from compromised users. There is no evidence of brand impersonation or credential theft infrastructure; instead, this domain appears focused solely on cryptocurrency theft via fake transaction signing requests. The page likely mimics legitimate crypto service interfaces such as wallet dashboards or exchange portals to mislead users into approving malicious transactions.

This domain exhibits multiple red flags. It was registered on June 17, 2024, through Key-Systems GmbH and resolves to IP address 188.114.97.3. It holds an SSL certificate issued by Google Trust Services, which does not validate legitimacy. PhishDestroy confirms only 1 of 95 VirusTotal security vendors detected the threat at the time of analysis. The domain is not currently flagged in Google Safe Browsing (GSB), nor is it widely blocked on major threat intelligence platforms, indicating limited or delayed recognition.

As of the latest assessment, ang-ju.gate-cryptolist.com remains active and operational. Immediate defensive actions include blocking the domain at the network and endpoint levels and flagging the associated IP and SSL certificate. Users are advised to avoid accessing the site and verify all crypto-related URLs via official channels. The elevated risk stems from active deployment, plausible UI design, and the potential for rapid propagation before broader detection. Remaining risk is moderate due to low public visibility but increases with continued operation.