lighthouseone[.]net

The domain lighthouseone.net was registered on 2026-06-03 through TUCOWS.COM, CO. DNS resolves to 45.153.34.48, an IP hosted in the Netherlands by VMHeaven.io and served behind Cloudflare. HTTP response returns a 303 redirect and the page title observed is “Security Check”. The web server stack includes Nginx with Plesk control panel, and the site uses a Let’s Encrypt certificate (R13). Cloudflare Browser Insights are detected, suggesting traffic monitoring. The infrastructure is listed on two public blocklists (PhishDestroy, ScamSniffer) and receives a Gridinsoft trust score of 0/100. VirusTotal analysis shows six of ninety‑one security vendors flag the domain, indicating probable malicious activity. The domain is currently active. Analysis indicates the site is being used for generic phishing, likely presenting a security verification page to harvest credentials or other personal data. The short lifespan (created less than two months ago) and rapid blocklisting are consistent with a campaign that leverages automated kit deployment. No further content has been publicly disclosed, so the exact payload or credential collection method remains unknown. Defenders should block DNS resolution to 45.153.34.48, add lighthouseone.net to URL filtering policies, and monitor for redirects that return HTTP 303. Incident response teams should treat any credential submissions to this domain as compromised and advise affected users to reset passwords. Ongoing surveillance of related IP ranges and the NJALLA nameservers (1-you.njalla.no, 2-can.njalla.in, 3-get.njalla.fo) is recommended.