leviahub[.]free-products-site[.]com

This domain, leviahub.free-products-site.com, is identified as a credential harvesting phishing site targeting users by impersonating Leviahub Spa. The domain is currently offline, but prior analysis confirms its malicious intent to capture sensitive login credentials through deceptive web forms. Analysis indicates the domain was flagged by 4 of 95 security vendors on VirusTotal, reflecting moderate detection coverage. It was registered through GoDaddy.com, LLC on March 07, 2026, an unusually future-dated creation that may indicate domain spoofing or typosquatting tactics. The domain resolves to the IP address 15.197.129.158 and appears on one security blocklist. Additional technical indicators include a Gridinsoft trust score of 0 out of 100 and the use of a Let’s Encrypt SSL certificate, which, while providing encryption, does not validate legitimacy. Detected technologies include Bootstrap, Select2, reCAPTCHA, jQuery, and HSTS, suggesting an attempt to mimic a professional web interface. The domain has been taken offline, reducing immediate risk to users. However, the infrastructure and registration patterns warrant continued monitoring. Users are advised to verify domain authenticity before entering credentials, particularly for financial or corporate services. Organizations should update blocklists to include this domain and its associated IP, and monitor for similar typosquatting or impersonation attempts. If credentials were entered on this site, affected parties should reset passwords immediately and enable multi-factor authentication where possible.