lifeeasyplatform[.]live

PhishDestroy identifies lifeeasyplatform.live as an active crypto drainer phishing domain under investigation. The domain employs a spoofed ‘lifeeasyplatform’ branding to trick users into connecting crypto wallets and authorizing malicious transactions. Threat intelligence confirms the deployment of drainer scripts and fraudulent withdrawal flows designed to siphon cryptocurrency assets from unsuspecting victims. This domain resolves to IP 198.251.89.220 and operates via a Let’s Encrypt SSL certificate, increasing perceived legitimacy. Registered through OwnRegistrar, Inc. on April 10, 2025, lifeeasyplatform.live currently shows 0 detections on VirusTotal (3/95) and has not been listed by Google Safe Browsing or major blocklists as of this advisory. lifeeasyplatform.live is currently active and represents an elevated immediate threat to cryptocurrency users. Immediate actions include blocking the domain at DNS and network levels, investigating associated IP infrastructure, and disseminating indicators to threat intelligence platforms. Users are strongly advised to avoid this domain entirely and review wallet transaction history. Remaining risk is assessed as high due to the absence of AV coverage and ongoing accessibility.