ligther[.]app

This domain, ligther.app, was registered on 21 December 2025 through NiceNIC International Group Co., Limited and is currently hosted behind Cloudflare (AS13335). DNS resolution points to the IP address 188.114.97.3, which is located in the United States and served by Cloudflare’s edge network. The domain presents a valid SSL certificate issued by Google Trust Services under the WE1 intermediate, indicating TLS termination is performed by Cloudflare’s infrastructure. HTTP requests to the site return a 403 status code, and the service has been taken offline as of the reporting date.

VirusTotal records show that six of ninety‑three scanned security vendors flagged the domain, demonstrating a modest level of detection across multiple engines. Independent blocklists PhishDestroy and ScamSniffer have listed ligther.app, and the domain appears on two additional security blocklists, reinforcing its classification as a phishing vector. The risk rating assigned is elevated, and the threat type is identified as generic phishing. Because the site is currently offline, active probing is limited, and no page title or content analysis is available.

Defenders should continue to block traffic to the domain at perimeter and DNS layers, monitor for any re‑activation or changes in DNS resolution, and consider adding the IP address 188.114.97.3 to network‑wide deny lists. Ongoing threat‑intel feeds should be queried for updates, and any internal alerts triggered by the six vendor detections should be investigated for potential credential‑stealing attempts. The presence of Cloudflare’s infrastructure does not mitigate the phishing risk; rather, it may be used to obscure the true origin of malicious payloads. Maintaining visibility on the domain’s registration details and its appearance on blocklists will aid in rapid response should the site resume operation.