brenton-vale[.]live

PhishDestroy identifies brenton-vale.live as a newly registered domain hosting a suspected cryptocurrency drainer kit. The domain does not yet impersonate a specific brand or service, suggesting an opportunistic attack targeting crypto users. Threat actors may leverage this domain to trick victims into connecting wallets or approving malicious transactions, though the exact drainer kit remains under forensic analysis. This domain resolves to IP 172.67.221.14 and was registered on May 11, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal currently reports 3/95 detections, indicating low signature-based detection, while the domain holds a valid Let's Encrypt SSL certificate. As of this assessment, the domain remains unflagged by Google Safe Browsing (GSB) and has not been added to any major blocklists, increasing its potential reach to unsuspecting users. While the immediate risk is assessed as 'under_investigation,' brenton-vale.live remains active and poses a credible threat to cryptocurrency users. PhishDestroy recommends immediate verification and blocking of this domain. Users should exercise extreme caution when encountering this domain, especially in the context of wallet connections or crypto-related transactions. Remaining risk is moderate due to the domain's recent registration and low detection rates, though proactive blocking can mitigate exposure.