chatbot-auth[.]live

PhishDestroy identifies chatbot-auth.live as an active phishing domain designed to impersonate legitimate chatbot authentication interfaces. The domain employs social engineering tactics to deceive users into entering credentials or sensitive information under the guise of a required login. Initial threat classification places this domain under the 'generic_phishing' category due to its broad targeting and lack of a specific brand impersonation. No known drainer kit or affiliated malware payloads have been detected at this time, though the domain's behavior aligns with credential harvesting operations. Domain registration details reveal a recent creation date of April 24, 2026, registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar often used in bulk low-cost domain purchases. The domain resolves to IP address 185.236.79.9 and utilizes a Let's Encrypt SSL certificate, which may lend an air of legitimacy to unsuspecting victims. VirusTotal currently shows 3/95 detections, indicating a low immediate detection rate, while Google Safe Browsing flags the domain under the 'SOCIAL_ENGINEERING' category. As of the latest assessment, the domain remains unlisted on major blocklists, suggesting a relatively recent deployment and ongoing operational status. Current status of chatbot-auth.live is marked as 'active' and 'under_investigation', with no active takedowns or blocks in place from major security vendors. The risk level remains undetermined due to the recency of the campaign and low detection rates, necessitating heightened vigilance from users and security teams. PhishDestroy recommends immediate avoidance of this domain and proactive blocking at the network perimeter via DNS or firewall rules. End users are advised to verify website authenticity through official channels and report any interactions with this domain to their respective cybersecurity teams or threat intelligence platforms. The remaining risk is classified as elevated due to the domain's plausible appearance and active campaigning despite low detection scores.