claim-asentum[.]live

This domain, claim-asentum.live, is flagged as an active crypto drainer phishing site targeting users through a fraudulent token presale page titled "Public Presale — Asentum." The infrastructure mimics legitimate cryptocurrency projects to deceive victims into connecting wallets, enabling unauthorized fund transfers via malicious smart contracts. No specific drainer kit variant has been attributed yet, but the page structure and behavior align with known crypto drainer campaigns. Analysis indicates the domain was registered on May 15, 2026, through Global Domain Group LLC, an atypical creation date suggesting potential WHOIS manipulation or registry error. It resolves to IP address 188.114.96.3, hosted by CloudFlare, Inc. in Canada, with a Let's Encrypt SSL certificate (serial E7). The domain appears on four security blocklists and is actively blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, a low detection ratio likely due to CloudFlare obfuscation or recent deployment. Current status remains active, with no takedown observed as of investigation. Response actions by security providers include real-time blocking, but the domain continues to resolve and serve content. Remaining risk is classified as high due to the direct financial threat posed by crypto drainers, low detection rates, and resilient hosting. Users are advised to avoid interacting with the domain, revoke any connected wallet permissions, and verify token sales exclusively through official project channels. Monitoring for additional domains registered under the same infrastructure or registrar is recommended.