sterkkalvix-zh[.]live

PhishDestroy identifies sterkkalvix-zh.live as an active credential harvesting domain designed to mimic legitimate login portals and steal user credentials. This domain resolves to IP 188.114.96.3 and leverages a recently issued Let's Encrypt SSL certificate to appear trustworthy. The domain was registered on April 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar with minimal oversight, increasing the likelihood of malicious use. This domain exhibits minimal detection on security platforms, with 1 out of 95 VirusTotal engines flagging it as malicious or suspicious as of the latest analysis. Such low detection rates often indicate either a newly deployed threat or one employing evasion tactics to bypass initial scans. The domain's recent creation and clean reputation further suggest it may be part of a coordinated phishing campaign targeting unsuspecting users. Users who have visited sterkkalvix-zh.live should immediately check their accounts for unauthorized access, especially if credentials were entered on the site. Avoid reusing passwords across platforms, as this domain may harvest login details for further exploitation. If any sensitive information was entered, reset passwords immediately and enable multi-factor authentication where possible. Report the domain to your security team or use browser-based tools to block future access. Monitor financial accounts for unusual transactions if financial details were provided.