lcaitoken[.]live

lcaitoken.live is a phishing domain involved in brand impersonation targeting the cryptocurrency exchange OKX. The site was used to deceive users by mimicking the OKX brand, potentially to harvest credentials or conduct scams. The domain is currently taken offline, reducing immediate risk, but its prior activity marks it as suspicious and under investigation for phishing threats.

Technical analysis shows lcaitoken.live was created on May 25, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 216.198.79.1, located in the US under AS16509 Amazon.com, Inc. The domain uses an SSL certificate issued by Let's Encrypt / R13 and employs technologies such as Vercel, Cloudflare, and jsDelivr. Despite 0 of 95 VirusTotal vendors detecting it as malicious and Google Safe Browsing not flagging it, lcaitoken.live appears on one security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0 out of 100. The page title observed was 'Lightchain — Claim Your Incentives,' consistent with phishing tactics.

Users encountering lcaitoken.live or similar phishing scams should remain cautious. Since this is a brand impersonation scam, individuals who submitted credentials should change their passwords immediately and enable two-factor authentication on their accounts. Monitoring for fraudulent activity is advised. The domain is no longer active, but any reports or suspicious observations can be submitted to relevant cybersecurity authorities or blocklist services such as PhishDestroy to aid in mitigation efforts. Confirming the safety of domains before interaction is recommended to avoid phishing risks.