analyzr[.]live

The domain analyzr.live has been identified as a high-risk crypto drainer site. This domain was primarily used to steal cryptocurrency by tricking users into revealing their private keys or other sensitive information. The site's page title, 'analyzr — Decode Every Token,' suggests it was designed to appear as a legitimate service for decoding and analyzing cryptocurrency tokens.

Infrastructure analysis reveals that the domain analyzr.live has been flagged by 11 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on May 07, 2026. It resolves to the IP address 172.67.156.246 and is currently associated with technologies such as Cloudflare Browser Insights and Cloudflare, which may be used to enhance the site's performance and security while masking its true nature. The domain's SSL certificate is issued by Let's Encrypt, a common practice among phishing sites to gain user trust. The domain appears on 4 security blocklists, further confirming its malicious intent.

As of the latest assessment, the domain analyzr.live has been taken offline, reducing the immediate risk to potential victims. However, the infrastructure and techniques used by the threat actors suggest a sophisticated operation capable of rapid domain cycling. Users are advised to remain vigilant and avoid visiting any similar-looking domains. Security teams should monitor for any new registrations or IP addresses associated with the same threat actors to prevent future attacks.