btc-day[.]live

This domain, btc-day.live, operates as a crypto drainer phishing site designed to extract wallet credentials and siphon cryptocurrency assets from unsuspecting users. Analysis indicates the site employs deceptive interfaces mimicking legitimate cryptocurrency platforms, tricking victims into entering private keys or seed phrases. Once compromised, funds are irreversibly transferred to attacker-controlled wallets, resulting in financial loss. The threat is classified as elevated due to its direct targeting of digital assets and the irreversible nature of cryptocurrency transactions. Infrastructure analysis reveals the domain was registered on April 07, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domains. The domain resolves to the IP address 188.114.97.3 and has been flagged by 3 out of 95 security vendors on VirusTotal, indicating limited but confirmed detection. Additionally, the domain appears on three independent security blocklists, further corroborating its malicious intent. A trust score of 0/100 from Gridinsoft underscores the high-risk nature of this infrastructure. Users who have visited btc-day.live or entered sensitive information on the site should immediately cease all interaction and take corrective action. First, disconnect any connected wallets from the internet and transfer remaining funds to a new, secure wallet using a clean device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. If private keys or seed phrases were exposed, consider the compromised wallet permanently at risk. Report the incident to relevant cryptocurrency platforms and local cybersecurity authorities to aid in tracking and mitigation efforts.