recoverywallet-live[.]com

Analysis of the domain recoverywallet-live.com indicates it is actively associated with a high-risk crypto drainer campaign. The domain was registered on June 12, 2025, through Tucows Domains Inc. and currently resolves to the IP address 119.18.54.100. As of July 12, 2026, the domain remains operational and is flagged on three security blocklists, including detection by systems specializing in malicious infrastructure. AlienVault OTX records the domain in 24 threat intelligence pulses, suggesting persistent tracking by security researchers. Google Safe Browsing classifies the site under the SOCIAL_ENGINEERING category, reinforcing its association with deceptive practices targeting users. Security vendor detections on this domain include 14 flags out of available scans, though the exact nature of these detections is not detailed in the available data. The domain's trust score is rated at 0/100, further corroborating its malicious classification. The page title, matching the domain name, provides no additional context regarding the targeted brand or service, leaving the specific impersonation or lure unclear without further analysis. Defenders should treat this domain as an active threat. The combination of registrar, IP resolution, and detection counts across multiple security platforms supports its classification as part of a crypto drainer operation. Network-level blocking and monitoring for related infrastructure are recommended to mitigate exposure. Given the domain's persistence since mid-2025, continued vigilance is advised, particularly for organizations handling cryptocurrency transactions or user authentication systems.