usa-unity-coin[.]ai-cryptolist[.]com

This domain, usa-unity-coin.ai-cryptolist.com, is identified as a cryptocurrency-focused phishing site designed to harvest wallet credentials and drain digital assets. Analysis indicates no direct association with known legitimate brands, though the domain structure mimics decentralized finance platforms to deceive users. The infrastructure employs a likely custom or third-party phishing kit, leveraging IPFS for payload delivery to evade traditional detection mechanisms.

Technical indicators confirm elevated risk: the domain is flagged by 19 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. Registered through Key-Systems GmbH on April 11, 2026, it resolves to IP address 188.114.96.3 and appears on two security blocklists, including PhishDestroy and OISD. The SSL certificate is issued by Google Trust Services, and the site employs Cloudflare with HTTP/3 and Vue.js frameworks, suggesting an attempt to mimic legitimate service architecture.

The domain is currently offline, likely due to takedown actions or infrastructure adjustments. However, residual risk persists as threat actors may re-deploy the phishing kit under a new domain or IP. Users who interacted with this site should immediately revoke wallet permissions, rotate credentials, and monitor transactions for unauthorized activity. Security teams are advised to block the domain, IP, and associated indicators across all network defenses to prevent re-infection or lateral movement.