lastbit[.]in

The domain lastbit.in has been assessed with an elevated risk level due to its involvement in brand impersonation. This specific threat involves the domain posing as a legitimate Telegram service, potentially leading to the compromise of user credentials and personal data.

Infrastructure analysis reveals that lastbit.in was created on November 14, 2024, and is registered through NameCheap, Inc. The domain resolves to the IP address 104.21.58.160 and uses technologies such as Tailwind CSS and Cloudflare for website development and DNS management. Additionally, the domain supports HTTP/3 and has an SSL certificate issued by Google Trust Services. According to VirusTotal, 3 out of 95 security vendors flagged this domain as malicious. The domain also appears on two security blocklists, specifically PhishDestroy and OISD, and has a Gridinsoft trust score of 30 out of 100. Furthermore, the domain is mentioned in 2 threat intelligence pulses on AlienVault OTX, indicating its involvement in known malicious activities. The current status of the domain is offline, which suggests that it may have been taken down or is not actively being used for malicious purposes at the moment.

To mitigate the risks associated with brand impersonation, users are advised to avoid visiting the domain lastbit.in and to verify the authenticity of any links or communications purporting to be from Telegram. Security teams should ensure that their network and endpoint security solutions are updated to block this domain and similar threats. Additionally, organizations should educate their employees and customers about the dangers of brand impersonation and provide clear guidelines on how to identify and report suspicious activities.