# sharesco-update.live — SUSPICIOUS > sharesco-update.live identified as credential phishing targeting users via fake updates. Flagged by 2 of 95 VirusTotal vendors. Check the full report. ## Summary PhishDestroy identifies sharesco-update.live as an active credential phishing domain designed to deceive users into divulging sensitive login credentials under the guise of a software update service. This domain resolves to IP 188.114.97.3 and was registered on March 29, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, using a Let's Encrypt SSL certificate. It has been flagged by 2 of 95 VirusTotal security vendors, indicating limited but concerning recognition within the threat intelligence community. The domain employs social engineering tactics by mimicking a legitimate update platform—potentially targeting users of financial, enterprise, or SaaS applications with fake login prompts. Given its recent registration date, low vendor detection at this time, and the use of a reputable certificate provider, sharesco-update.live poses an elevated risk to unsuspecting users. Its structure suggests preparation for larger-scale phishing campaigns. All users and organizations are advised to block this domain at the network and DNS levels. If accessed, avoid entering any credentials and report the domain to your IT security team or abuse contacts immediately. Monitor network traffic for outbound connections to 188.114.97.3 as an indicator of compromise. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-29 16:04:16 - Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED - IP: 188.114.97.3 ## Detection Status - VirusTotal: 2 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/sharesco-update.live - PhishDestroy: https://phishdestroy.io/domain/sharesco-update.live/ - LLM endpoint: https://phishdestroy.io/domain/sharesco-update.live/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/sharesco-update.live/ Last updated: 2026-04-02