key-livechat[.]com

This domain, key-livechat.com, is engineered to conduct credential theft by impersonating legitimate customer support portals. Analysis indicates the site deploys realistic chat interfaces and login prompts to trick users into submitting sensitive account credentials, including usernames, passwords, and multi-factor authentication codes. The infrastructure is designed to resemble corporate helpdesk environments, increasing the likelihood of successful deception among employees and end-users seeking technical assistance. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on February 21, 2026, an anomalous future date suggesting registrar manipulation or falsified records. It resolves to IP address 159.65.160.245, hosted on AS14061 (DigitalOcean, LLC) in the United States. Security vendors on VirusTotal flagged the domain at 18/95, while PhishDestroy and at least one additional blocklist have actively blocked it. The SSL certificate, identified as R13, lacks transparency and may be self-signed or issued through a non-standard certificate authority, further obscuring its legitimacy. Users who visited key-livechat.com should assume their credentials have been compromised. Immediately reset passwords for any accounts entered on the site, prioritizing email, financial, and corporate systems. Enable multi-factor authentication where available, using app-based or hardware tokens instead of SMS. Monitor accounts for unauthorized transactions or access attempts, and report any suspicious activity to relevant security teams. Organizations should add the domain and its resolving IP to internal blocklists and conduct a review of logs for connections to 159.65.160.245. If browser sessions were active during the visit, clear all cached data and run a full antivirus scan to detect potential post-exploitation payloads.