lightsource[.]co[.]in

This domain, lightsource.co.in, is flagged as a generic phishing site targeting users through a fabricated corporate introduction page. The site presents itself under the title 'Light Source - Company Introduction,' likely designed to deceive victims into entering sensitive credentials by impersonating a legitimate business entity. No specific brand or drainer kit has been conclusively identified at this stage, though the page structure and content suggest a credential harvesting objective. Infrastructure analysis reveals the domain was registered on February 28, 2026, through GoDaddy, an unusual future date indicating potential domain spoofing or registry manipulation. It resolves to the IP address 63.176.8.218 and employs a Let's Encrypt SSL certificate, providing a false sense of security. The site is hosted on Netlify and enforces HSTS, which may complicate detection by less sophisticated security tools. VirusTotal reports 0 detections out of 95 engines, and the domain appears on a single security blocklist. No entries were found in Google Safe Browsing at the time of analysis. The domain has been taken offline, likely following detection and reporting. While no longer active, the infrastructure remains a residual risk due to the future-dated registration and the use of legitimate hosting services to evade initial scrutiny. Organizations are advised to monitor for related domains registered through the same registrar or resolving to the same IP range. Users who accessed the site should reset credentials immediately and enable multi-factor authentication on critical accounts. The anomalous creation date warrants further investigation into potential registry abuse or domain generation algorithm activity.