onlivems[.]us

This domain onlivems.us was registered on April 24, 2026 and resolves to the IP address 198.54.119.191 hosted by Namecheap, Inc. in the United States. Infrastructure analysis reveals an active HTTP status 200 response paired with a page title of Namecheap Parking Page and an SSL certificate issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36. The domain maintains MX records directed to mx1-hosting.jellyfish.systems at priority 5 along with an additional record at priority 10. These elements establish the basic network footprint observed on the report date of July 12, 2026.

Detection data shows a Gridinsoft trust score of 0/100 together with presence on 3 security blocklists. The domain is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal returns 2 detections out of 95 vendors while AlienVault OTX records the domain inside 1 threat intelligence pulse. The classification lists the threat type as generic_phishing at high risk level with current status marked active. These quantitative indicators provide the primary observable evidence of malicious designation.

What remains uncertain is the precise campaign infrastructure or downstream actor attribution beyond the listed blocklist entries and the single OTX pulse. The parking page title suggests possible placeholder content rather than a fully developed lure at the time of observation. No additional ASN or geolocation details beyond the US assignment are supplied in the available records.

Defenders should incorporate the IP 198.54.119.191 and the domain onlivems.us into existing block policies and watch for newly registered .us names sharing the same name server or certificate patterns. Regular rechecking of the three blocklist memberships and the VirusTotal count is advisable given the confirmed active status. Monitoring mail flows involving the documented MX hosts may also surface related abuse attempts.