pornlive[.]io

This domain, pornlive.io, is currently flagged as an active credential phishing site targeting users of the adult entertainment platform Pornhub. Analysis confirms the domain is designed to impersonate the legitimate Pornhub.com interface, as evidenced by the page title 'Pornhub.com - Watch Live Video' and the use of branding elements consistent with the authentic site. The domain remains operational and poses an elevated risk to users who may be deceived into entering login credentials or other sensitive information under false pretenses. Infrastructure analysis reveals the domain was registered on June 29, 2026, through the registrar Immaterialism Limited. It resolves to the IP address 82.198.228.22, which may be part of a broader hosting infrastructure used for malicious activities. As of the latest assessment, pornlive.io has been flagged by 3 of 95 security vendors on VirusTotal, indicating limited but present detection coverage. The SSL certificate is issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the domain’s intent. No additional blocklist entries or trust scores were identified at the time of analysis, though the domain’s recent creation and low detection rate suggest it may still be evading broader scrutiny. Current status indicates the domain remains active and continues to present a credible impersonation of Pornhub. Organizations and individuals are advised to block access to pornlive.io at the network level and update endpoint protection rules to include this domain. Users should be educated on recognizing phishing attempts, particularly those leveraging brand impersonation, and encouraged to verify domain authenticity before entering credentials. Security teams are recommended to monitor for additional indicators of compromise, such as unusual login attempts or data exfiltration patterns, particularly from networks where this domain may have been accessed.