# thaliveking.com — MALICIOUS

> thaliveking.com is a crypto drainer phishing site impersonating legitimate platforms. 15/95 security vendors flag it. Verify safety on PhishDestroy before use.

## Summary
Is thaliveking.com Safe?

PhishDestroy identifies thaliveking.com as an active crypto drainer phishing domain posing elevated risk to cryptocurrency users. This domain is engineered to trick visitors into connecting crypto wallets under false pretenses, then draining funds without consent. Unlike generic phishing pages, this site specifically targets blockchain users by mimicking legitimate crypto services, exchanges, or DeFi platforms to harvest private keys or authorize fraudulent transactions.

This domain was flagged by 15 out of 95 VirusTotal security vendors, indicating substantial malicious activity recognition. It was registered through Gname.com Pte. Ltd. on July 12, 2022. It resolves to IP address 178.236.38.1 and holds a valid SSL certificate issued by Let's Encrypt, which is commonly abused by threat actors to appear legitimate. The domain’s age (over 2 years) suggests sustained hosting infrastructure rather than a short-lived campaign, increasing the risk of prolonged exposure.

Crypto drainer phishing sites like thaliveking.com exploit trust in familiar platforms and urgent user actions. Users are advised to never connect wallets or enter credentials on unsolicited links. Always verify domains against PhishDestroy and use hardware wallets or secure browser extensions to monitor transaction approvals. If exposed, immediately revoke unauthorized wallet connections via your wallet’s connection manager and report the domain to your security vendor and platform support.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2022-07-12 18:24:24
- Registrar: Gname.com Pte. Ltd.
- IP: 178.236.38.1

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/98c82f6b-641f-43d6-b5d5-b84740e10d7a
- PhishDestroy: https://phishdestroy.io/domain/thaliveking.com/
- LLM endpoint: https://phishdestroy.io/domain/thaliveking.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/thaliveking.com/
Last updated: 2026-03-22