lives02[.]run

PhishDestroy identifies lives02.run as a recently activated crypto drainer domain designed to steal cryptocurrency assets from unsuspecting users. This domain mimics legitimate live event platforms to deceive visitors into connecting wallets or submitting transaction details, enabling unauthorized fund transfers. The threat actor behind this campaign leverages urgency and familiarity to bypass user skepticism, making it a high-risk vector for financial loss. This domain was flagged with a VirusTotal score of 1/95 detections, indicating it has evaded initial scanning engines. It was registered through Unstoppable Domains Inc on March 30, 2026, and resolves to IP 34.42.100.71 with a valid Let's Encrypt SSL certificate. The combination of a freshly registered domain, zero detections, and reputable infrastructure suggests this is an emerging threat actively testing detection evasion techniques. Users who visited lives02.run should immediately disconnect any connected wallets, revoke any unauthorized permissions, and scan their devices for malware. Do not enter credentials or cryptocurrency transaction details. Report the domain to your wallet provider and consider filing an incident report with relevant cybersecurity authorities. Monitor financial accounts for unauthorized transactions and update security settings across all platforms.