lievec[.]com

Analysis as of July 24, 2026 indicates that lievec.com is a newly registered domain (created March 16, 2026) that has been used for generic phishing. The site returned an HTTP response with the title “Index of /”, suggesting a directory listing rather than a branded landing page. The server presented a TLS certificate issued by Sectigo Limited, confirming that HTTPS was enabled. Network probes resolve the hostname to IP 69.57.162.186, which belongs to the Namecheap, Inc. AS22612 network located in the United States. The hosting environment advertises PHP and LiteSpeed, consistent with a typical web‑application stack used by phishing operators.

Registration details show the domain was purchased through NameSilo, LLC, and the authoritative nameservers are dns1.namecheaphosting.com and dns2.namecheaphosting.com. VirusTotal scans recorded three positive detections out of ninety‑four submitted security vendors, and the domain appears on three external blocklists. Independent anti‑phishing feeds, including PhishDestroy, MetaMask, and SEAL, have already flagged and blocked the domain. The current HTTP status is offline, indicating that the site has been taken down or is no longer serving content. Defenders should incorporate the observed indicators of compromise into their perimeter defenses.

Blocking the domain name lievec.com, its resolving IP address 69.57.162.186, and the associated name‑server entries will stop outbound connections to the known phishing infrastructure. Adding the domain to internal URL filtering and updating external threat‑intelligence feeds with the observed blocklist entries will reduce the risk of accidental exposure. Continuous monitoring of the registrar NameSilo and the hosting AS22612 network for new domains that resolve to the same IP range is recommended, as adversaries often reuse infrastructure.