truezeuscoin[.]ai-cryptolist[.]org

This domain, truezeuscoin.ai-cryptolist.org, is flagged as an active crypto drainer phishing site targeting cryptocurrency users. Registered on April 11, 2026, through Key-Systems GmbH, it currently resolves to IP 188.114.96.3, hosted behind Cloudflare nameservers abdullah.ns.cloudflare.com and harlee.ns.cloudflare.com. The domain returns an HTTP 302 redirect and presents a page titled 'Just a moment...', a common indicator of Cloudflare protection or intermediary filtering. Analysis indicates the use of a seed phrase phishing kit, aligning with the scam type labeled as a crypto drainer. Infrastructure reveals the use of IPFS, Vue.js, and HTTP/3, suggesting a modern, dynamic frontend designed to harvest wallet credentials or seed phrases. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, which does not mitigate the malicious intent of the domain. Detection by 17 of 94 security vendors on VirusTotal further corroborates its classification as malicious, though the absence of additional vendor flags does not imply safety. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. The use of Cloudflare infrastructure may complicate takedown efforts, so monitoring for changes in resolution or SSL certificates is recommended. Given the crypto drainer classification, assume any interaction with this domain could result in immediate financial loss. No legitimate user activity is expected, and no further analysis of the site's content is required for mitigation.