li-nk3[.]github[.]io

This domain, li-nk3.github.io, is currently under investigation for brand impersonation targeting the Across platform. The site presents itself as an official Across resource, as evidenced by its page title 'Link3™ : Official Site,' but infrastructure analysis reveals no legitimate affiliation with the brand. The domain remains active and has not yet been widely flagged by security vendors, indicating a potential early-stage phishing campaign. Infrastructure analysis reveals the domain resolves to the IPv6 address 2606:50c0:8003::153, hosted on AS54113 (Fastly, Inc.) in the United States. It is registered through GitHub, Inc., a common hosting provider for both legitimate projects and malicious activity due to its free and accessible nature. The domain appears on one security blocklist (PhishDestroy) but has not been flagged by any of the 95 vendors on VirusTotal as of the latest scan. The SSL certificate is issued by Let's Encrypt (R12), a widely trusted certificate authority, which may contribute to the site's superficial legitimacy. No historical creation date is provided, but the use of GitHub Pages suggests recent deployment. The risk posed by li-nk3.github.io is currently classified as under investigation, though its active status and brand impersonation tactics warrant caution. Users are advised to avoid interacting with the domain, particularly if redirected from unofficial sources. Organizations should monitor for references to this domain in logs or phishing reports and consider blocking the IP address 2606:50c0:8003::153 at the network level. Given the domain's low detection rate, security teams are encouraged to submit samples to threat intelligence platforms for broader analysis. If the domain is encountered in a corporate or financial context, immediate reporting to the impersonated brand's security team is recommended to facilitate takedown efforts.