vitaliks-dog[.]ai-cryptolist[.]com

This domain, vitaliks-dog.ai-cryptolist.com, is identified as a crypto wallet drainer phishing site targeting cryptocurrency users. Analysis indicates the domain was designed to impersonate legitimate crypto-related services, likely exploiting the association with high-profile blockchain figures to deceive victims into connecting wallets or entering private keys. The domain is currently offline, though prior activity suggests it was actively used in malicious campaigns. Infrastructure analysis reveals the domain was registered through Key-Systems GmbH on April 11, 2026, and resolves to the IP address 188.114.96.3. It is flagged by 18 of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious nature. The domain appears on one security blocklist, and its Gridinsoft trust score is 0 out of 100, further corroborating its fraudulent purpose. Technologies detected include IPFS for decentralized hosting, Vue.js for frontend development, Cloudflare for content delivery and protection, and HTTP/3 for enhanced performance, a combination often observed in phishing infrastructure to evade detection and improve scalability. The domain is currently offline, though its prior operational status and technical indicators suggest it may resurface under a different name or infrastructure. Organizations and individuals are advised to block the domain and its associated IP address at the network level. Users who may have interacted with the site should immediately revoke any connected wallet permissions, transfer assets to a secure wallet, and monitor accounts for unauthorized transactions. Security teams should review logs for connections to 188.114.96.3 and the domain itself, as these may indicate compromised systems or attempted fraud.