# live-check.quest — SUSPICIOUS

> Live-Check.Quest is a live credential-stealing scam resolved to 104.21.46.155. Flagged by 3/95 VirusTotal vendors, this active phishing domain masquerades as a.

## Summary
Live-Check.Quest is an active credential-harvesting domain categorized under generic phishing with an elevated risk level. This domain poses a direct threat to user credentials by luring victims into submitting login details through a fake security interface.    PhishDestroy identifies this domain as follows: VirusTotal shows 3 out of 95 security vendors have flagged the domain; the SSL certificate is issued by Let’s Encrypt; the domain resolves to IP address 104.21.46.155; it was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 18, 2026. The low vendor detection rate suggests limited current exposure on public blocklists, increasing the risk of successful user compromise.    Mitigation steps for this threat include: immediately blocking the domain at network and endpoint levels; instructing users to avoid visiting the site; resetting credentials if any interaction occurred; monitoring for anomalous login attempts targeting harvested accounts; and sharing this IOC with SOC teams for proactive threat hunting. Users should verify URLs manually and only access services through official, bookmarked links to prevent interaction with fraudulent domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 09:30:29
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.46.155

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/86f8a83f-2240-4cde-a34d-7239af2da0a3
- PhishDestroy: https://phishdestroy.io/domain/live-check.quest/
- LLM endpoint: https://phishdestroy.io/domain/live-check.quest/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/live-check.quest/
Last updated: 2026-03-23