kolz[.]gate-cryptolist[.]com

This domain, kolz.gate-cryptolist.com, is identified as a crypto drainer phishing site designed to extract wallet credentials and drain cryptocurrency assets. Analysis indicates no direct brand impersonation, but the infrastructure aligns with known drainer kits targeting decentralized finance (DeFi) users. The site employs social engineering tactics, such as fake token airdrops or wallet verification prompts, to trick victims into connecting their wallets to malicious smart contracts. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.97.3 and was registered on June 17, 2024, through Key-Systems GmbH. VirusTotal detection shows 14 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, and its Gridinsoft trust score is 0/100. Google Safe Browsing (GSB) status is not explicitly provided, but the domain is actively blocked by at least one security provider. The domain remains active and poses an elevated risk to users. Response actions include blocking the domain at the DNS and proxy levels, as well as monitoring for associated IP or registrar-based patterns. Despite these measures, the remaining risk persists due to the domain's recent registration and low detection coverage. Users are advised to verify wallet connections, avoid interacting with unsolicited prompts, and employ browser-based security extensions to mitigate exposure to such threats.