mslive05[.]us

The domain mslive05.us was registered on 2026-04-09 and immediately resolved to the IPv4 address 162.213.253.120, a host known to be operated by Namecheap, Inc. in the United States. The web server returns HTTP 200 responses, indicating that content is actively being served. TLS negotiation presents a Sectigo Limited certificate issued by the Sectigo Public Server Authentication CA DV R36, confirming the presence of a valid SSL chain. Security telemetry shows that the site is flagged as high‑risk generic phishing. VirusTotal records five detections out of ninety‑five scanned engines, and the Gridinsoft trust score is zero out of one hundred, reflecting a strong malicious confidence rating. The domain appears on three reputable blocklists and is referenced in one AlienVault OTX pulse, demonstrating that multiple threat‑intelligence feeds have already catalogued the indicator. Although the content served by the site has not been publicly captured, the combination of a recent creation date, active HTTP service, a valid but inexpensive SSL certificate, and multiple independent detections strongly suggests that the infrastructure is being used for credential‑harvesting or social‑engineering campaigns. Defenders should block outbound connections to 162.213.253.120, add mslive05.us to domain deny lists, and monitor for any traffic patterns that attempt to resolve or contact the domain. Ongoing observation of new VirusTotal submissions and blocklist updates is recommended to capture any evolution of the payload or hosting changes.