alightmotionapp[.]net

The domain alightmotionapp.net was created on February 21, 2026 and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The page title returned by the server is "Alight Motion"; no additional content has been examined beyond this header.

Infrastructure analysis shows the site is powered by WordPress, MySQL, PHP, and jQuery, with hosting components identified as Hostinger. Cloudflare services are visible through the presence of Cloudflare Browser Insights, HTTP/3 support, and the authoritative nameservers eve.ns.cloudflare.com and nicolas.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services / WE1, providing TLS 1.3 encryption. An HTTP request returns a 200 status code, indicating the web server is actively responding.

Threat intelligence indicates the domain is classified as a generic phishing operation and is currently listed on one security blocklist. PhishDestroy has explicitly blocked the domain, and Gridinsoft has assigned a trust score of 0 out of 100. Although VirusTotal reports zero detections out of 95 engines, this lack of detection does not constitute a safety assurance. The domain remains active and is flagged for further monitoring.

Open questions include the exact nature of the content served at the endpoint and whether credential‑harvesting mechanisms are present. Defenders should add alightmotionapp.net to outbound filtering rules, monitor DNS and IP changes for any re‑hosting activity, and educate users about unsolicited communications that reference "Alight Motion". Continuous re‑scanning with multi‑engine services and periodic review of blocklist status are recommended to maintain situational awareness.