# rayresolvelive.com — MALICIOUS

> rayresolvelive.com is a crypto drainer hosting a fake login portal. 9 security vendors flag this domain. Verify with PhishDestroy before clicking.

## Summary
PhishDestroy identifies rayresolvelive.com as a live crypto drainer site that impersonates a crypto-resolve portal to trick users into linking wallets and signing malicious transactions. The domain prompts victims to enter seed phrases or sign wallet-connect payloads, after which assets are drained directly from connected wallets. No known fake-brand variant has yet been isolated, indicating the actors are currently operating a generic but highly effective drainer kit targeting multi-chain wallet users.


Technical indicators for this domain include a VirusTotal score of 9/95 security vendors at time of analysis, registration through MAT BAO CORPORATION, a single IPv4 endpoint at 188.114.96.3, a Google-trusted SSL certificate issued by Google Trust Services, and a domain creation date of November 19 2025. Public blocklists already list this domain, and its recent creation and low VT coverage suggest it may still be in a ramp-up phase targeting social media campaigns and phishing emails.


The site remains ACTIVE as of the latest scan. PhishDestroy has added rayresolvelive.com to its blocklist and issued takedown requests to the hosting provider and certificate authority. Users should avoid visiting the domain, revoke any wallet approvals made after visiting, and scan connected devices for infostealers. Residual risk remains elevated due to the rapid domain rotation tactics favored by crypto drainer gangs.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-19 15:35:14
- Registrar: MAT BAO CORPORATION
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/6e11047e-e293-41db-8fed-0ccfe5f3145b
- PhishDestroy: https://phishdestroy.io/domain/rayresolvelive.com/
- LLM endpoint: https://phishdestroy.io/domain/rayresolvelive.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rayresolvelive.com/
Last updated: 2026-03-22