lives02[.]run

lives02.run entered the PhishDestroy evidence set on Mar 31, 2026. The stored content classification is generic phishing. The assembled evidence scores 81/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar on Jul 11, 2026 at 03:50 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. URLQuery recorded no positive detection. On Mar 31, 2026 at 15:00 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match. URLScan completed without a malicious verdict (score 0).

HTTP 302 was recorded on Aug 7, 2026 at 10:18 UTC. Registration records for the domain list Unstoppable Domains Inc as the registrar and Mar 30, 2026 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 34.42.100.71 on AS396982 (Google LLC). The associated network metadata labels the endpoint as Google Cloud (us-central1) in Council Bluffs, US. The stored server header is Google Frontend. Captured page title: “unstoppabledomains.com”. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:07 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jun 28, 2026; checked Apr 22, 2026 at 20:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as generic phishing.