marketsguru[.]live

The domain marketsguru.live was a phishing site engaged in brand impersonation targeting the cryptocurrency platform base. It posed an elevated risk by mimicking legitimate services to deceive users into disclosing sensitive information or transferring funds, though no drainer kit was detected. As of the latest verification, marketsguru.live has been taken offline.

Technical indicators confirm the domain's malicious intent. marketsguru.live was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0/100. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through NameCheap, Inc. on March 15, 2025, and resolved to the IP address 104.21.54.198, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Markets Guru'. Technologies detected included Cloudflare and HTTP/3, with only one nameserver configured.

Users who interacted with marketsguru.live should take immediate safety steps. If credentials were entered, change passwords for the impersonated platform (base) and enable two-factor authentication. Monitor accounts for unauthorized transactions or signs of fraud. For cryptocurrency-related phishing, revoke any token approvals granted to suspicious sites and consider transferring funds to a new wallet. Report the domain to relevant platforms, including the impersonated brand's security team, and submit it to threat-intelligence feeds such as PhishTank or URLVoid for further tracking.