live-maii[.]com

This domain, live-maii.com, is confirmed as a credential theft phishing site designed to harvest user login credentials through deceptive login portals. Analysis indicates no direct association with known brand impersonation or crypto drainer kits, but the infrastructure aligns with typical credential harvesting campaigns. The domain lacks SSL encryption, increasing the likelihood of plaintext credential interception during transmission. Infrastructure analysis reveals the domain was registered through Hosting Concepts B.V. d/b/a Registrar.eu on February 28, 2026, and resolves to the IP address 180.178.160.153, hosted under AS213441 (SLAYER GROUP LIMITED) in Germany. VirusTotal reports 22 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The domain currently lacks Google Safe Browsing (GSB) detection, though this may reflect a lag in propagation rather than benign status. The domain has been taken offline, reducing immediate risk to users. However, the registration remains active, and the infrastructure could be repurposed for future campaigns. Historical resolution data suggests potential ties to other malicious domains hosted on the same IP. Users who interacted with the domain prior to takedown should assume credential exposure and initiate password resets for affected accounts, particularly if multi-factor authentication was not enabled.