ancient8[.]gate-cryptolist[.]com

PhishDestroy identifies ancient8.gate-cryptolist.com as an active crypto-draining phishing domain first cataloged on June 17, 2024. The site impersonates Gate.io’s cryptocurrency interface and injects a drainer script that automatically transfers victims’ tokens to attacker-controlled wallets upon wallet connection. No known affiliation with Gate.io is acknowledged; the domain appears to be a standalone phishing kit targeting users searching for crypto listing pages.

This domain was flagged by PhishDestroy with elevated risk after VirusTotal scanners returned a detection ratio of 1 out of 95 security vendors as of seed 213351. The domain is registered through Key-Systems GmbH, resolves to IP 188.114.97.3, and holds a valid Google Trust Services SSL certificate. Creation date is June 17, 2024, and the site remains unblocked by Google Safe Browsing. These technical indicators collectively confirm a recently spun up, minimally detected phishing asset with active infrastructure.

At time of writing the domain remains active and responsive, indicating ongoing operation of the crypto drainer. Users are advised to avoid clicking links to ancient8.gate-cryptolist.com and to verify any Gate.io links via PhishDestroy’s live lookup tool. Because the drainer kit leverages wallet connection prompts, the remaining risk is elevated: funds may be drained in seconds upon interaction. Block the IP 188.114.97.3 at the firewall and report the domain to hosting providers for immediate takedown.