qwen-ai[.]ai-cryptolist[.]com

This domain is flagged as a crypto wallet drainer, a specific threat type that deploys malicious scripts to siphon cryptocurrency from connected wallets. The risk level is elevated due to its active targeting of users through deceptive infrastructure and confirmed malicious behavior. Analysis indicates multiple red flags: the domain is detected by 18 out of 95 security vendors on VirusTotal, appears on at least one security blocklist, and is blocked by enterprise-grade threat intelligence platforms. It was registered through Key-Systems GmbH on April 11, 2026, an unusually future-dated creation that may indicate fraudulent activity. The domain resolves to IP address 188.114.96.3, utilizes Cloudflare for hosting, and employs HTTP/3 alongside IPFS and Vue.js technologies. The SSL certificate is issued by Google Trust Services, which, while legitimate, is commonly exploited by threat actors to lend credibility. The Gridinsoft trust score of 0/100 further corroborates its malicious nature. To mitigate risks associated with crypto wallet drainers, users should immediately disconnect any wallets from this domain and revoke smart contract approvals via blockchain explorers. Avoid interacting with unsolicited links, particularly those promising cryptocurrency rewards or airdrops. Verify domain registration dates and SSL issuers for anomalies, such as future-dated creation or mismatched certificate authorities. Employ browser-based wallet extensions with built-in phishing protection and maintain up-to-date security tools to detect and block malicious scripts. If funds were already compromised, report the transaction to the relevant blockchain network and consider filing a report with cybercrime authorities.