cz-dog[.]ai-cryptolist[.]net

This domain, cz-dog.ai-cryptolist.net, is identified as a crypto drainer phishing operation targeting cryptocurrency users. Analysis indicates the site employs deceptive tactics to trick victims into connecting wallets, enabling unauthorized fund transfers. No direct brand impersonation is evident, but the infrastructure aligns with known drainer kits used in prior campaigns. The page title 'Just a moment...' suggests an attempt to mimic legitimate loading screens, a common evasion technique in phishing schemes. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Key-Systems GmbH, a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.68.219, which has been linked to other phishing infrastructure. Detection metrics show 17 out of 95 security vendors flagging the domain on VirusTotal, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services, a neutral but widely abused provider. No Google Safe Browsing (GSB) detections are recorded at this time. The domain is currently offline, likely due to takedown efforts or infrastructure rotation. Despite its inactive status, residual risk persists due to the transient nature of phishing campaigns. Historical associations with the IP and registrar suggest potential for rapid redeployment under new domains. Users are advised to verify wallet connections, monitor transaction histories, and treat unsolicited cryptocurrency-related links with heightened scrutiny. Security teams should maintain updated blocklists to mitigate exposure to similar threats.