us07live[.]com

Analysis of the domain us07live.com indicates a confirmed brand impersonation campaign targeting Namecheap, with elevated risk classification due to its association with known phishing infrastructure. The domain was registered on December 29, 2025, through NameCheap, Inc., and resolves to the IP address 104.219.248.91, which is geolocated in the United States under AS22612 (Namecheap, Inc.). Infrastructure analysis reveals that the hosting provider aligns with the registrar, a pattern occasionally observed in both legitimate and malicious domains but notable given the domain's detection history. The domain appears on one security blocklist, specifically PhishDestroy, and is flagged by 6 of 93 security vendors on VirusTotal as malicious.

While the detection count is not exhaustive, it corroborates the blocklist entry and suggests prior malicious activity. The SSL certificate, issued by Sectigo Public Server Authentication CA (DV R36), is consistent with domain-validated certificates commonly used in both legitimate and phishing sites, offering no definitive indication of intent but confirming encrypted communication. The page title, 'Namecheap Parking Page,' directly references the impersonated brand, reinforcing the classification of brand impersonation. However, the exact content and functionality of the site remain unanalyzed, as the domain is currently offline.

Gridinsoft assigns a trust score of 0/100, further supporting the assessment of elevated risk. Defenders are advised to treat this domain as malicious until further analysis can confirm its status. Network-level blocking of the IP 104.219.248.91 and monitoring for related domains registered through the same registrar may mitigate potential threats. Given the domain's recent creation and detection by multiple security vendors, continued vigilance is recommended, particularly for organizations utilizing Namecheap services.