adexdashboard[.]live

Analysis of the domain adexdashboard.live indicates active credential phishing infrastructure as of July 12, 2026. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious registrations. It resolves to the IP address 172.67.158.159, which is part of a network commonly used to mask phishing sites behind content delivery and security services. The domain is currently flagged by 7 of 95 security vendors in available scans, and it appears on two independent security blocklists, including PhishDestroy and BLP-Malware. Open threat intelligence platforms report the domain in 24 distinct pulses, suggesting repeated detection across multiple campaigns. The SSL certificate is issued by Google Trust Services, which does not inherently indicate malicious intent but is consistent with phishing sites leveraging legitimate certificate authorities to appear trustworthy. The page title 'Just a moment...' is a known indicator of sites using Cloudflare or similar services to filter or redirect traffic, often employed to evade detection or serve different content based on visitor profiles. Technologies detected on the domain include Cloudflare Browser Insights and HTTP/3, further supporting the use of Cloudflare infrastructure to obscure the true origin and behavior of the site. The domain remains active, and its trust score is rated at 0/100, reflecting high-risk classification based on observed indicators. While the exact content and target of the phishing campaign are not yet analyzed, the combination of registration patterns, hosting infrastructure, blocklist presence, and threat intelligence reports confirms the domain's involvement in malicious activity. Defenders are advised to block the domain at the network level and monitor for related indicators, including the resolving IP and associated registrar data, to mitigate potential credential harvesting or other phishing-related threats.