iscanxlive[.]fun

PhishDestroy has identified iscanxlive.fun as an elevated-risk generic phishing domain, specifically a crypto drainer designed to impersonate the SolRay multi-chain portfolio tracker. The site falsely presents itself as a legitimate tool for tracking cryptocurrency portfolios across multiple chains, but its true purpose is to steal users' private keys or seed phrases through deceptive prompts. The domain is currently offline, but its prior activity poses a significant threat to crypto users who may have encountered it while active.

Technical analysis reveals several red flags. VirusTotal reports that 9 out of 95 security vendors flag this domain as malicious, indicating broad industry recognition of its threat. The domain was registered on April 27, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 188.114.96.3. It appears on at least three security blocklists and is referenced in one AlienVault OTX threat intelligence pulse. The SSL certificate was issued by Let's Encrypt (E8), which is commonly abused by malicious sites due to its free and automated issuance process. These indicators collectively underscore the domain's malicious intent and the need for vigilance.

To protect against crypto drainers like this, users should always verify the authenticity of any portfolio tracker or DeFi platform by double-checking the official domain through trusted sources. Never enter private keys, seed phrases, or sensitive wallet information on websites accessed via unsolicited links or search results. Enable two-factor authentication on all crypto accounts and use hardware wallets for added security. If you believe you have interacted with this domain, immediately revoke any permissions granted and transfer funds to a new wallet. PhishDestroy continues to monitor such threats and advises staying informed through official security channels.