layerchain[.]net[.]ng

This domain, layerchain.net.ng, is identified as a high-risk brand impersonation threat targeting the 'across' platform. Analysis confirms the domain was actively spoofing the legitimate brand, presenting itself under the page title 'Layers Chain™ | Home'. The domain is currently offline, but prior activity indicates malicious intent to deceive users through fraudulent representation. Infrastructure analysis reveals the domain was registered through AfeesHost Ltd on June 25, 2025, and resolved to the IP address 188.138.39.187, hosted under AS29066 (velia.net Internetdienste GmbH) in France. Security vendor detections on VirusTotal indicate 12 of 95 engines flagged the domain as malicious. The domain appears on four distinct security blocklists, and its SSL certificate was issued by Let's Encrypt (R12). These indicators align with known patterns of brand impersonation used to facilitate credential harvesting or fraudulent transactions. The domain has since been taken offline, but residual risk remains for users who may have interacted with it prior to its deactivation. Organizations are advised to update blocklists to include this domain and its associated IP address (188.138.39.187). Security teams should review logs for connections to the domain or IP, particularly those originating from users who may have engaged with 'across'-related content. Proactive monitoring for similar impersonation domains registered through the same registrar or hosted on the same AS is recommended to mitigate future threats.