live05ms[.]us

live05ms.us entered the PhishDestroy evidence set on Jun 14, 2026. The assembled evidence scores 100/100 (critical).

Four independent sources are positive: VirusTotal, MetaMask, SEAL, and Spamhaus DBL. VirusTotal recorded 17 detections among 94 engines: Certego, SOCRadar on Jul 18, 2026 at 16:05 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. Spamhaus DBL: DBL_MALWARE on Jul 13, 2026 at 18:38 UTC. The evidence is not unanimous. AlienVault OTX listed 1 community pulse reference (not vendor detections) on Apr 11, 2026 at 17:23 UTC. Google Safe Browsing returned no flag on Apr 9, 2026 at 05:00 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:50 UTC. The recorded creation date for the domain is Apr 8, 2026. At collection time, the hostname resolved to 68.65.122.92 on AS22612 (Namecheap, Inc.). The associated network metadata labels the endpoint as Namecheap, Inc in Allen, US. The stored server header is LiteSpeed. TLS metadata lists Sectigo Limited / Sectigo Public Server Authentication CA DV R36 as the certificate issuer with validity through Dec 18, 2026; checked Jul 9, 2026 at 10:00 UTC.

Neither a page title nor a landing-page capture is stored. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as phishing. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.