legichain[.]com

The domain legichain.com was registered on February 21, 2026 through Isimtescil Bilisim A.S. and is currently classified as a high‑risk generic phishing site. Its risk rating is high, its operational status is active, and it appears on one public security blocklist. The domain is flagged by PhishDestroy and has a Gridinsoft trust score of 0 out of 100.

Infrastructure analysis shows that legichain.com resolves to the IP address 188.114.97.3, which belongs to a Cloudflare edge node located in Canada. The site is served over HTTPS using a Let’s Encrypt certificate (subject E8). DNS is delegated to ns1.dns-parking.com and ns2.dns-parking.com, and mail is handled by hostinger MX records mx1.hostinger.web.tr (priority 5) and mx2.hostinger.web.tr (priority 10). The web server reports a 200 HTTP status and runs LiteSpeed with front‑end libraries including Bootstrap, jQuery, Modernizr, Swiper, Slick, Lightbox, and the Hostinger web stack.

The landing page’s title reads “Legichain | Digital KYC – Travel Rule – AML Compliance Solutions”, suggesting a facade of legitimate KYC and AML services. However, the known intelligence tags the site as a cryptocurrency scam, indicating that the page is likely used to harvest credentials or payment details under the pretense of compliance. VirusTotal recorded a single positive detection out of 95 scanned vendors, reinforcing the low‑signal yet consistent malicious classification.

Defenders should add legichain.com to network deny lists, enforce DNS sinkholing for the domain and its associated name servers, and monitor traffic to the IP 188.114.97.3 for anomalous TLS handshakes. Email filters ought to block messages originating from the listed MX hosts. End‑user awareness campaigns must highlight the deceptive KYC branding and advise users to verify any requests for cryptocurrency transactions through official channels.