yieltra[.]ai-cryptolist[.]net

This domain, yieltra.ai-cryptolist.net, carries an elevated risk level as a generic phishing threat specifically designed to impersonate the CRYPTOLIST brand. Security analysts at PhishDestroy classify this as a crypto drainer, meaning its primary goal is to trick visitors into connecting their cryptocurrency wallets or entering private keys, then siphoning funds. The site is currently offline, but its infrastructure remains a concern for future campaigns.

Technical indicators paint a clear picture of malicious intent. VirusTotal data shows that 2 out of 95 security vendors flagged this domain, indicating moderate but credible detection. The domain was registered on April 11, 2026, through Key-Systems GmbH, a registrar sometimes exploited by bad actors. It resolves to IP address 172.67.198.248, which is associated with Cloudflare infrastructure, and uses an SSL certificate issued by Google Trust Services (WE1), which is legitimate but does not ensure website safety. The domain appears on one security blocklist, and its page title was "CRYPTOLIST" before being taken offline.

Users who encounter this domain should never connect their cryptocurrency wallets or enter any personal information. Since the threat is a crypto drainer, the most critical step is to avoid any interaction with the site, even if it appears legitimate. Always verify URLs by checking official CRYPTOLIST channels or using PhishDestroy's verification tools. If you have already interacted with the site, immediately revoke any token approvals and transfer assets to a new wallet. Stay vigilant against similar domains that may resurface under different names.