Análisis de phishing y seguridad de livecalls.app

livecalls.app is currently flagged as a high‑risk generic phishing domain. The domain was registered on 7 May 2026 through Namecheap Inc. and uses the default Namecheap parking nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. DNS resolution points to the single IPv4 address 104.219.248.106, which is hosted in the United States at 3402 East University. The host presents a valid Sectigo Limited DV certificate issued by the Sectigo Public Server Authentication CA (R36) and responds to HTTP requests with a 302 redirect to a landing page that displays the generic Namecheap parking title “Namecheap Parking Page”. Threat‑intel aggregators have listed the domain on three blocklists, and it is actively blocked by PhishDestroy, MetaMask and SEAL. VirusTotal reports three detections out of ninety‑one scanners, and AlienVault OTX includes the domain in one pulse. Gridinsoft assigns a trust score of zero out of one hundred. No additional payload or phishing kit information is available from the current data set, and the actual content of the site has not been observed. Given the combination of recent registration, use of a parking page, multiple blocklist entries, and the limited detections, defenders should treat livecalls.app as a probable phishing vector. Recommended mitigations include adding the domain to outbound and inbound deny lists, monitoring DNS queries for the associated IP, and reviewing any user‑reported attempts that reference the domain. Continuous re‑assessment is advised should the site transition from a parking page to an active phishing landing page.