aiinvest-tw[.]co

aiinvest-tw.co is identified as an active phishing domain specifically engaged in a crypto drainer threat. This domain attempts to deceive users by draining cryptocurrency wallets through fraudulent means. There is no indication that it impersonates a well-known brand, but the risk remains elevated due to its malicious intent.

The domain was created on April 17, 2026, and is registered through NameSilo, LLC. It resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Let's Encrypt. Security analysis shows that 12 out of 95 VirusTotal vendors have flagged this domain for malicious activity. This level of detection highlights a significant threat potential. No additional blocklist or trust score data is available at this time.

Currently, aiinvest-tw.co remains active and poses a real threat to users interacting with it. Users are strongly advised not to engage with this domain or provide any sensitive information. Verification of this domain’s status and related security intelligence should be conducted via trusted resources such as PhishDestroy. Organizations and individuals should implement domain filtering and maintain up-to-date endpoint protection to mitigate exposure to this crypto drainer phishing campaign.