app[.]lightchainkyc[.]com

This domain is flagged as a fraudulent KYC verification portal designed to harvest sensitive authentication credentials from unsuspecting users. Analysis indicates the site mimics legitimate identity verification processes, likely targeting users of blockchain or financial services platforms. The page title, Lightchain KYC Portal, suggests an attempt to impersonate a trusted entity, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals multiple high-risk indicators. The domain app.lightchainkyc.com was registered on July 4, 2025, through HOSTINGER operations, UAB, a registrar frequently associated with newly created phishing infrastructure. It resolves to the IP address 145.223.104.166 and is currently offline, though it remains flagged by 4 out of 95 security vendors on VirusTotal. Additionally, the domain appears on one security blocklist, further confirming its malicious classification. The Gridinsoft trust score of 0/100 underscores the absence of legitimate use cases. Users who visited app.lightchainkyc.com should assume their credentials were exposed and take immediate remediation steps. First, revoke any active sessions tied to the submitted credentials and enable multi-factor authentication on all associated accounts. Monitor financial and cryptocurrency wallets for unauthorized transactions, as phishing victims are frequently targeted for follow-up attacks. If personal data was entered, consider placing a fraud alert with credit bureaus to mitigate potential identity theft. Finally, report the incident to relevant cybersecurity authorities to aid in tracking and disrupting the campaign.