super-lenddex[.]live

super-lenddex.live is flagged as a high‑risk phishing domain. The site was created on May 09 2026 and is presently active, responding with HTTP 403 for direct requests. Its public TLS certificate is issued by Let’s Encrypt (issuer E7) and is valid for the host name, a pattern often used to lend credibility to fraudulent pages. The domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. and is geo‑located in Canada. Nameserver configuration lists lady.ns.cloudflare.com and ryan.ns.cloudflare.com, confirming that the attacker is using Cloudflare’s DNS and CDN services to obscure the true server location and to benefit from Cloudflare’s built‑in security features. Reputation data shows a Gridinsoft trust score of 0 / 100 and placement on a single security blocklist. AlienVault OTX references the domain in one pulse, and the independent service PhishDestroy reports it as blocked. VirusTotal analysis has 2 out of 95 scanning engines flagging the domain, indicating limited but existing detection by security vendors. These indicators collectively suggest a targeted phishing campaign rather than a one‑off drop. The combination of a newly‑created domain, a reputable CDN, a valid TLS certificate, and low‑visibility detection points to an adversary that is attempting to evade mass‑scale blocking while still reaching specific victims. The exact brand or credential harvesting technique remains unconfirmed. Defenders should treat any traffic to super‑lenddex.live as malicious. Recommended actions include adding the domain and its resolving IP to network deny lists, enforcing URL filtering at mail gateways, and monitoring DNS queries for the associated Cloudflare nameservers. Continuous re‑evaluation of VirusTotal and threat‑intel feeds is advised to capture any escalation in detection rates.