lombardfinance[.]live

The domain lombardfinance.live is a generic phishing site designed to deceive users into disclosing sensitive information such as login credentials or personal data. It does not impersonate a specific well-known brand and is not associated with a known crypto drainer kit. As of the latest verification, lombardfinance.live has been taken offline, reducing immediate risk to users.

Technical analysis shows that lombardfinance.live was flagged by 3 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and Gridinsoft, which assigned it a trust score of 0/100. The domain appears on 1 security blocklist, specifically PhishDestroy. It was registered through PONYNET-07 (ASN: 53667) and resolved to the IP address 198.251.84.200, hosted by FranTech Solutions in the US. The site had no SSL certificate, and its nameservers were ns5.my-control-panel.com and ns6.my-control-panel.com. The observed page title was 'Lombard Finance', and the HTTP status returned was 429.

Users who may have interacted with lombardfinance.live should take immediate steps to secure their accounts. If login credentials were entered, change passwords for all affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any suspicious transactions. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Additionally, notify the registrar (PONYNET-07) of the abuse.