lineabridge[.]co

This domain, lineabridge.co, is flagged as a high-risk brand impersonation threat targeting Linea, a blockchain ecosystem. Analysis indicates the site masquerades as the legitimate Linea Hub, presenting itself as "Your gateway to the Linea ecosystem" to deceive users into interacting with malicious infrastructure. No direct evidence of a crypto drainer kit was observed, but the domain’s design and branding strongly suggest intent to harvest credentials or facilitate fraudulent transactions within the crypto space.

Infrastructure analysis reveals the domain was registered through Key-Systems GmbH on February 21, 2026, and resolves to the IP address 216.198.79.1, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Let’s Encrypt (serial number E7). At the time of assessment, the domain was detected by 16 out of 95 security vendors on VirusTotal, with additional listings on three security blocklists. The domain was actively blocked by multiple threat intelligence feeds, including PhishDestroy, MetaMask, and SEAL, but did not appear on Google Safe Browsing at the time of analysis.

The domain has since been taken offline, likely in response to detection and blocking by security vendors. However, residual risk remains due to the potential for infrastructure reuse or re-registration under a similar name. Organizations and users are advised to monitor for related domains, particularly those mimicking Linea or other blockchain ecosystems, and to verify the authenticity of any platform claiming to represent official crypto services. Continuous vigilance and real-time threat intelligence are recommended to mitigate similar threats.