flaze-coin[.]next-cryptolist[.]net

This domain is flagged for elevated-risk wallet-draining phishing, a threat type that lures cryptocurrency users into connecting wallets to malicious smart contracts, resulting in unauthorized fund transfers. Analysis indicates the domain specifically mimics crypto wallet or exchange interfaces to harvest private keys or seed phrases, enabling immediate asset theft. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Key-Systems GmbH and resolves to IP address 172.67.181.166. It appears on one security blocklist, with 18 out of 95 security vendors on VirusTotal detecting malicious activity. The SSL certificate is issued by Google Trust Services, and the domain currently holds a Gridinsoft trust score of 0/100. Despite its recent creation date, the domain has already been taken offline, though residual risks may persist. Mitigation requires immediate action from cryptocurrency users who may have interacted with the domain. Users should revoke any smart contract approvals granted to unknown addresses via blockchain explorers and transfer remaining assets to a new wallet. Network-level protections include blocking the domain and its resolving IP (172.67.181.166) at firewalls or DNS filters. Security teams should monitor for related indicators, including wallet addresses or transaction hashes associated with this campaign, and update endpoint detection rules to flag similar phishing patterns targeting crypto users.