stakemaxalt-ai[.]live

This domain, stakemaxalt-ai.live, is identified as a crypto drainer phishing campaign designed to mimic legitimate AI-assisted trading platforms. Analysis of the page title, "Stake Maxalt | Official Platform for AI Assisted Trading," indicates an attempt to impersonate a trusted trading service, likely to deceive users into connecting cryptocurrency wallets. The infrastructure appears to deploy a drainer kit, a common tool used in such campaigns to automatically siphon funds once wallet access is granted. No specific brand impersonation matches were confirmed, but the thematic targeting aligns with known crypto-related fraud patterns. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 24, 2026, an unusually forward-dated registration that may suggest automated or fraudulent domain creation practices. The domain resolves to the IP address 188.114.97.3, which has been associated with other low-reputation hosting environments. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while AlienVault OTX lists it in a single threat intelligence pulse. The domain appears on one security blocklist and is not currently indexed by Google Safe Browsing. SSL certification is provided by Let's Encrypt, a common but neutral indicator in such cases. As of the latest assessment, stakemaxalt-ai.live has been taken offline, likely due to enforcement actions by security providers. Despite its inactive status, residual risk remains for users who may have interacted with the domain prior to its removal. Historical DNS records and cached page versions may still pose a threat if accessed. Users are advised to verify wallet connections, revoke any suspicious authorizations, and monitor accounts for unauthorized transactions. Organizations should update blocklists to include this domain and its associated indicators to prevent future exposure.