lightchain-en[.]live

This domain is flagged for elevated risk due to brand impersonation targeting Across Protocol, a decentralized bridging platform. The threat involves credential harvesting and potential financial fraud, leveraging fake protocol interfaces to deceive users into disclosing sensitive information or authorizing malicious transactions. Infrastructure analysis reveals the domain lightchain-en.live was registered through OwnRegistrar, Inc. and resolves to the IP address 192.3.190.186. It appears on one security blocklist and is actively blocked by PhishDestroy. The domain’s page title, "Lightchain Protocol AI - Lightchain.ai," mimics legitimate branding, while its SSL certificate is issued by Let’s Encrypt. Detection engines on VirusTotal flagged the domain as malicious, with 4 out of 95 vendors marking it as unsafe. The Gridinsoft trust score for this domain is 0/100, indicating no legitimacy. Technologies detected include LiteSpeed and HTTP/3, which are commonly used in both legitimate and malicious web infrastructure. Mitigation steps for this threat type include blocking the domain and its associated IP (192.3.190.186) at the network perimeter. Organizations should update endpoint protection rules to flag or quarantine any attempts to access lightchain-en.live. Users of Across Protocol should verify domain authenticity before interacting with any platform claiming affiliation, particularly those soliciting credentials or transaction approvals. Security teams are advised to monitor for similar impersonation domains registered through OwnRegistrar, Inc., as this registrar has been linked to other malicious infrastructure. If credentials or funds were exposed via this domain, immediate password resets and transaction reversals should be initiated.