mystatemnt-desktopcapps[.]live

The domain mystatemnt-desktopcapps.live is identified as a credential phishing site designed to harvest user login credentials through fraudulent interfaces. Currently, the domain is offline, though prior analysis confirms its use in phishing operations. No specific brand impersonation has been confirmed, but the infrastructure aligns with generic credential theft campaigns. Infrastructure analysis reveals the domain was registered through Google LLC and resolves to the IP address 78.40.143.162, hosted under AS45839 (Shinjiru Technology Sdn Bhd) in Bulgaria. The SSL certificate is issued to 78-40-143-240.cprapid.com, a common pattern in rapidly deployed phishing hosts. Security vendors flagged the domain on VirusTotal, with 17 of 95 engines detecting malicious activity. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and is explicitly labeled as phishing by Google Safe Browsing. The page title, 'Index of /', suggests an exposed directory listing, a frequent indicator of misconfigured or hastily deployed phishing servers. The domain has been taken offline, reducing immediate risk to end users. However, the underlying infrastructure may remain active for future campaigns. Organizations and individuals are advised to block the domain and associated IP (78.40.143.162) at the network level. Security teams should monitor for related domains registered under the same registrar or resolving to the same IP range. End users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window and enable multi-factor authentication where available. Analysis of the seed 'e017a4' confirms consistent phishing indicators, reinforcing the need for continued vigilance against similar threats.