receivesales[.]live

Analysis of the domain receivesales.live indicates it was actively involved in an e-commerce scam operation, as classified by available threat intelligence. The domain was registered on March 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with fraudulent domains. Infrastructure analysis reveals the domain resolved to the IP address 188.114.97.3, hosted under Cloudflare, Inc. in Canada, and utilized Cloudflare nameservers romina.ns.cloudflare.com and troy.ns.cloudflare.com. The site employed technologies including Framer Sites, React, HSTS, and HTTP/3, though no SSL certificate was detected, which is atypical for legitimate e-commerce platforms.

Detection data from July 23, 2026, shows that 10 of 94 security vendors on VirusTotal flagged receivesales.live as malicious, and it appeared on one security blocklist, specifically PhishDestroy. The page title 'Mainnets Connect' suggests an attempt to impersonate a cryptocurrency or blockchain-related service, though no specific brand impersonation is confirmed in available intelligence. The Gridinsoft trust score of 0/100 further corroborates its high-risk classification. As of the report date, the domain has been taken offline, though its prior infrastructure and detection history warrant continued monitoring.

Defenders should treat this domain as part of a broader e-commerce fraud campaign, particularly given its use of Cloudflare to obfuscate hosting details. Network administrators are advised to block the IP 188.114.97.3 and monitor for related domains registered through the same registrar. While the exact content of the phishing pages remains unanalyzed, the combination of detection counts, registrar reputation, and scam classification provides sufficient evidence to classify receivesales.live as a confirmed malicious domain.