dates[.]live

Analysis of the domain dates.live (registered April 21, 2026) indicates active brand impersonation activity classified as high-risk. The domain resolves to IP 64.70.19.34, hosted in the US under ASN associated with Worldsite.WS. Infrastructure review shows nameservers fwd1.dccdns.com through fwd4.dccdns.com, suggesting a distributed DNS configuration often observed in phishing campaigns. The SSL certificate is issued by DigiCert Inc (Thawte TLS RSA CA G1), which does not inherently indicate malicious intent but is commonly leveraged by threat actors to appear legitimate. The page title 'Just a moment...' and HTTP 302 redirect status suggest the site may be configured to evade initial detection or serve dynamic content based on visitor attributes. As of July 12, 2026, the domain remains active and is flagged on one security blocklist. Three of 94 security vendors on VirusTotal have detected this domain, though the specific detection context (phishing, malware, or other) is not detailed in available intelligence. No specific brand target is confirmed in the provided data, though the classification as 'brand impersonation' implies the domain likely mimics a legitimate entity. Defenders should treat this domain as malicious, block resolution at DNS and proxy layers, and monitor for connections from internal assets. Further analysis of network traffic patterns and payload delivery mechanisms is recommended to determine the exact nature of the impersonation and potential secondary infection vectors.