lbapp939[.]live

PhishDestroy identifies lbapp939.live as an active fake login page phishing domain currently under investigation for malicious activity.

This domain was flagged by 4 of 95 VirusTotal vendors as of the latest scan, indicating a low initial detection rate despite its suspicious nature. It resolves to IP address 45.59.170.99 and utilizes a Let's Encrypt SSL certificate for perceived legitimacy. Registered through NameCheap, Inc., the domain was created on January 22, 2026, and currently hosts no active blocklist entries or trust score improvements, suggesting a newly operational infrastructure with minimal historical scrutiny.

Given the ongoing investigation status and zero detections on VirusTotal at this time, users are advised to exercise extreme caution when accessing lbapp939.live or any linked subpages. Concrete recommendations include blocking the domain at the network level, avoiding any interaction with login prompts or forms, and reporting the domain to relevant cybersecurity platforms such as PhishDestroy or local CERT teams. Additionally, organizations should monitor outbound traffic to IP 45.59.170.99 for signs of compromise, as this IP may be leveraged for data exfiltration or further phishing campaigns. Immediate disconnection from suspicious links and system scans are strongly encouraged if any interaction has already occurred.