recoveryassaetmgmt[.]icu

The domain recoveryassaetmgmt.icu was registered on February 21, 2026 and is currently listed as offline. Infrastructure analysis shows the hostname resolves to the IPv4 address 192.3.141.252, which is hosted in the United States under ASN 36352 owned by HostPapa. The site was identified by the PhishDestroy blocklist and appears on a single security blocklist, confirming its inclusion in known phishing mitigation feeds. VirusTotal scans report that 7 of 93 antivirus and URL‑reputation engines flag the domain as malicious, indicating partial but notable consensus among detection vendors.

The TLS certificate presented on the site is identified as version R11, and the page title returned by the HTTP response is "Recovery Phrase," matching the observed phishing kit label "Recovery Scam" and the broader classification of a crypto‑related scam. Gridinsoft assigns the domain a trust score of 0 out of 100, further evidencing its malicious reputation. No additional public threat‑intel sources such as OTX or Safe Browsing entries are referenced in the available data.

Because the site is offline, content cannot be verified, but the combination of registration date, hosting details, blocklist presence, vendor detections, and low trust score provides sufficient evidence to deem the domain a confirmed crypto phishing threat. Defenders should immediately block the domain and its resolved IP address at perimeter firewalls, DNS resolvers, and proxy filters. Ongoing monitoring of the 192.3.141.252 address for any re‑hosting activity is advised, as well as inclusion of the domain in internal threat‑intel feeds to prevent future user exposure.