sponge-bsc[.]ai-cryptolist[.]net

This domain, sponge-bsc.ai-cryptolist.net, is identified as a crypto wallet drainer phishing site designed to steal digital assets from victims interacting with fraudulent blockchain services. Analysis indicates the infrastructure mimics legitimate cryptocurrency platforms, likely targeting users of Binance Smart Chain (BSC) or similar ecosystems. The domain employs social engineering tactics, such as fake token airdrops or wallet verification prompts, to trick users into connecting their wallets to malicious smart contracts. Infrastructure analysis reveals the domain was registered on April 11, 2026, through Key-Systems GmbH and resolves to the IP address 172.67.198.248. It is flagged by 16 out of 95 security vendors on VirusTotal, with a trust score of 0/100. The domain appears on two security blocklists, including PhishDestroy and OISD, and uses an SSL certificate issued by Google Trust Services. The page title 'Just a moment...' suggests the use of Cloudflare or similar services to obfuscate malicious activity. As of the latest assessment, the domain has been taken offline, likely due to hosting provider intervention or registrar enforcement. However, the remaining risk persists due to the potential for the threat actors to re-deploy the infrastructure under a new domain. Users are advised to verify wallet connections, avoid interacting with unsolicited crypto-related links, and monitor transaction histories for unauthorized activity. Organizations should update blocklists to include this domain and related indicators of compromise.