lightchainmainnet[.]live

Analysis of lightchainmainnet.live shows a domain that has been actively listed on multiple security blocklists, indicating a high confidence of malicious intent. The domain was registered on December 20, 2025 through NiceNIC International Group Co., Limited and currently resolves to the IP address 216.198.79.65, which belongs to Amazon.com, Inc. (AS16509) and is located in the United States. Hosting details reveal the use of Vercel and the presence of HTTP Strict Transport Security (HSTS), while the DNS records are served by Cloudflare nameservers ashton.ns.cloudflare.com and betty.ns.cloudflare.com. The site presents an HTTP status code 451, signalling that the content is unavailable for legal reasons, and the domain has been taken offline, consistent with a recent takedown.

The SSL certificate is issued by Let’s Encrypt (R13), confirming that TLS is in place despite the offline status. The page title retrieved from the site is "Lightchain Protocol AI - Lightchain.ai," which suggests an attempt to impersonate a legitimate project. VirusTotal scans flagged the domain on 7 of 93 security engines, and it is explicitly blocked by PhishDestroy and ScamSniffer, reinforcing the phishing classification. While the exact content of the page has not been captured, the combination of blocklist presence, certificate issuance, and page title aligns with typical phishing infrastructure.

Defenders should add lightchainmainnet.live to internal blocklists, monitor DNS queries for the associated IP and nameservers, and ensure that any endpoint attempting to resolve or contact this domain is denied. Incident response teams should also review recent logs for attempts to reach this host and, if found, quarantine affected systems. Continuous threat‑intel feeds should be consulted for any re‑registration attempts or related indicators.