lombardfinance[.]live[.]update-api[.]live

The domain lombardfinance.live.update-api.live was registered on February 21, 2026 and is currently taken offline. The site presented the page title "Lombard Finance" and is classified as a crypto scam that impersonates the brand "across". Technical indicators show the domain uses an SSL certificate identified as R13, and a Gridinsoft trust score of 0 out of 100, indicating a complete lack of trust. VirusTotal analysis recorded four detections out of ninety-three security vendors, confirming that multiple scanners have flagged the domain as malicious.

The domain appears on a single security blocklist and is specifically blocked by PhishDestroy, reinforcing its malicious reputation. No additional infrastructure details such as IP address, ASN, or hosting provider are provided, and the site’s content has not been captured because the domain is offline. Defenders should treat this indicator as a confirmed malicious resource.

Immediate actions include adding the full domain name to DNS blocklists, configuring web proxy and firewall rules to deny any outbound connections to the domain, and updating intrusion detection signatures to flag attempts to resolve or contact it. Continuous monitoring of DNS query logs for the domain or closely related subdomains is advised, as the operators may reactivate the site or launch new variants. Threat intelligence feeds should be refreshed to capture any future re‑registrations, and security teams should alert users about the associated crypto‑scam campaign that pretends to represent the "across" brand.