reallive[.]work

PhishDestroy first observed reallive.work on Jul 23, 2026. The captured page title is “reallive.work is registered at Namecheap”. Current evidence score: 90/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 6 detections among 91 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft, SOCRadar on Jul 30, 2026 at 02:08 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 02:20 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection on Jul 23, 2026 at 14:18 UTC. Google Safe Browsing returned no flag on Jul 23, 2026 at 13:59 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 02:25 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 22:25 UTC; content was unavailable. Registration records for the domain list NAMECHEAP INC as the registrar and Jul 22, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 192.64.119.89 on AS22612 (Namecheap, Inc.). The recorded endpoint location is Atlanta, US. The stored server header is nginx/1.28.3 (Ubuntu). DOM analysis on Jul 23, 2026 at 14:20 UTC returned 90/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.

The content indicators and 3 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.