anju[.]gate-cryptolist[.]com

PhishDestroy identifies anju.gate-cryptolist.com as an active cryptocurrency wallet phishing domain designed to steal user credentials and digital assets. This site poses a high-risk threat to individuals interacting with cryptocurrency platforms, particularly those managing wallet logins or private keys. The domain mimics legitimate crypto service gateways, tricking users into entering sensitive information that is harvested by attackers. Security researchers note a recent surge in such scams leveraging fake 'crypto list' domains to ensnare victims seeking portfolio tracking tools. This domain was flagged with a creation date of June 17, 2024, and resolves to IP address 188.114.97.3. Currently, VirusTotal scans show 0 detections out of 95 engines, indicating the site has not yet been widely blacklisted. It is registered through Key-Systems GmbH, a domain registrar known for accommodating high-risk registrations, which often correlates with malicious intent. The use of Google Trust Services SSL certificates provides a false sense of legitimacy, further deceiving potential victims. While the domain remains under active investigation by cybersecurity teams, its recent establishment and low detection rate suggest it is in the early stages of deployment, likely targeting unsuspecting users through phishing campaigns or malicious advertisements. Users who have accessed this domain should immediately cease any interaction and disconnect from the site. If credentials, wallet addresses, or private keys were entered, assume they have been compromised and take immediate action. Transfer remaining assets to a newly generated wallet address, revoke any exposed API keys or permissions, and enable multi-factor authentication on all crypto-related accounts. Report the domain to your antivirus provider, the hosting provider, and relevant cybercrime units such as the FBI IC3 or local cybersecurity agencies. Monitor financial accounts and crypto wallets for unauthorized transactions, as attackers may attempt to drain funds within minutes of credential theft. Exercise extreme caution with any unsolicited links, especially those promoting 'crypto tools' or 'portfolio trackers', and verify domain legitimacy through official channels before engagement.