damus[.]live

damus.live is a generic phishing domain that was taken offline after being flagged as a threat. It does not impersonate a specific brand or use a known drainer kit, but its sole purpose was to deceive visitors into providing sensitive information. The domain is currently inactive, meaning it no longer poses an active risk, but users should remain cautious about similar domains.

Technical indicators for damus.live include a detection rate of 2 of 95 VirusTotal vendors, with Gridinsoft and SOCRadar flagging it. The domain was registered through Name.com, Inc on December 18, 2025, and resolves to IP address 185.107.74.191, located in SE (AS200430 WEBO LLC). It appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. No SSL certificate was issued, and the page title observed was 'Application placeholder'. The Gridinsoft trust score is 0/100, indicating high risk.

To stay safe from generic phishing threats like damus.live, users should never enter personal information on suspicious sites. If credentials were entered, change passwords immediately and enable two-factor authentication on all accounts. Monitor for unauthorized activity and report the domain to authorities like the Anti-Phishing Working Group or your email provider. Since no drainer kit was involved, no token approval revocation is needed, but general vigilance against unknown domains is advised.