lseginca[.]com

This domain, lseginca.com, is actively engaged in credential theft targeting users of the London Stock Exchange (LSEG) brand. Analysis indicates the site is designed to harvest login credentials through deceptive login portals mimicking official LSEG platforms. As of the latest assessment, the domain remains operational and unblocked by major browser-based security mechanisms, posing a continued risk to unsuspecting users. Infrastructure analysis reveals the domain was registered on June 21, 2026, through GoDaddy.com, LLC, a registrar frequently associated with malicious activity due to its permissive registration policies. The domain resolves to the IP address 103.93.125.156, which has been linked to prior phishing campaigns in regional threat intelligence feeds. Detection metrics show that 5 of 95 security vendors on VirusTotal have flagged lseginca.com as malicious, while it appears on one additional security blocklist. The site employs a Let's Encrypt SSL certificate, a common tactic to lend an appearance of legitimacy. Google Safe Browsing has classified the domain under the SOCIAL_ENGINEERING category, further confirming its fraudulent intent. The current risk level is assessed as high due to the domain's active status, low detection rates among security vendors, and the sensitive nature of the targeted credentials. Users are strongly advised to avoid interacting with lseginca.com and any associated subdomains. Organizations should implement DNS-based blocking for the domain and its resolving IP address, 103.93.125.156, at the network perimeter. Additionally, security teams are recommended to monitor for indicators of compromise, including unauthorized access attempts or anomalous login activity originating from this infrastructure. End-users who may have entered credentials on this site should immediately reset their passwords and enable multi-factor authentication on all financial and corporate accounts.