backdropcyberrecovery[.]com

The domain backdropcyberrecovery.com was registered on February 21, 2026 and is currently listed as offline. Infrastructure analysis shows that the domain resolves to the IPv4 address 198.23.141.202, which is geolocated to the United States and associated with the host identifier "Ming Ran." The domain appears on a single security blocklist, specifically PhishDestroy, indicating that at least one reputable anti‑phishing feed has flagged it. VirusTotal scanning reports that two of ninety‑three security vendors flagged the domain, confirming the presence of malicious activity despite a relatively low detection count.

The threat classification provided is "Wallet/Seed Phishing," suggesting that the site is designed to harvest cryptocurrency wallet recovery phrases or seed phrases from unsuspecting victims. No additional intelligence such as registrar details, SSL certificate information, or page title content is available in the current dataset. The limited detection footprint and the fact that the domain is offline imply that the campaign may have been short‑lived or taken down, but the underlying infrastructure (IP address and hosting environment) could be reused for future operations.

Defenders should ensure that the IP 198.23.141.202 is added to network blocklists, monitor for any re‑registration of the domain or similar domains targeting the same scam vector, and incorporate the domain’s hash into endpoint and email security policies. Continuous ingestion of threat intel feeds that include PhishDestroy and VirusTotal updates is recommended to capture any resurgence of this indicator.