beth[.]ai-cryptolist[.]org

This domain, beth.ai-cryptolist.org, operates as a crypto wallet drainer designed to siphon digital assets from victims' cryptocurrency wallets. The site employs deceptive interfaces mimicking legitimate wallet services, tricking users into authorizing transactions that transfer funds to attacker-controlled addresses. Analysis of the domain's infrastructure and behavior patterns confirms its specialization in financial theft rather than generic credential harvesting, presenting an immediate risk to users with exposed wallet connections. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain resolves to IP address 188.114.96.3 and was registered on April 11, 2026, through Key-Systems GmbH, an unusually recent creation date suggesting short-term malicious deployment. VirusTotal detection metrics show 17 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and uses a Google Trust Services SSL certificate, which while legitimate, is commonly exploited by threat actors to lend false credibility to phishing sites. Users who visited beth.ai-cryptolist.org should immediately revoke any wallet authorizations granted through the site using their wallet's connected apps interface. All cryptocurrency transactions initiated from this domain should be considered compromised, necessitating a transfer of remaining assets to a new, secure wallet address. Monitor connected accounts for unauthorized access attempts and enable transaction alerts for future activity. The domain's current offline status does not eliminate risk, as attackers may redeploy similar infrastructure under different domains using the same seed pattern (91b2da). Consider implementing browser-based wallet protection extensions that block known malicious domains.