MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für lemondesktop.me
lemondesktop[.]
This domain is flagged as an elevated-risk phishing infrastructure specifically designed to impersonate the Lemon Cash cryptocurrency wallet desktop application.
- VirusTotal
- 6/91
- Blocklists
- 2 · MetaMask, SEAL
- Verfügbarkeit
- Inhalt nicht verfügbar · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
lemondesktop.me — Inhalt nicht verfügbar (HTTP 502). Zusammenfassung der Beweislage: VirusTotal 6/91 (alphaMountain.ai, CRDF, ESET, Fortinet, Gridinsoft); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Registrar: Squarespace Domains.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
This domain is flagged as an elevated-risk phishing infrastructure specifically designed to impersonate the Lemon Cash cryptocurrency wallet desktop application. Analysis indicates the site operates as a credential harvesting platform, likely targeting users attempting to download legitimate wallet software. The threat type is classified as generic_phishing with a focus on cryptocurrency theft through fake application distribution. Infrastructure analysis reveals multiple technical indicators confirming malicious activity. The domain lemondesktop.me resolves to IP address 91.92.241.250 and is registered through Squarespace Domains LLC, with a creation date of June 05, 2026 - an anomalous future timestamp suggesting domain registration manipulation. Security vendor detections include 6/95 flags on VirusTotal and a 0/100 trust score from Gridinsoft. The domain appears on three security blocklists and is referenced in two AlienVault OTX threat intelligence pulses. Detection systems including MetaMask, PhishDestroy, and SEAL have blocked access to this infrastructure. The page title 'Lemon Cash for Windows — Desktop App | Lemon Cash' precisely matches legitimate branding to increase deception efficacy. Mitigation requires immediate action from both end users and security teams. Users should verify all cryptocurrency application downloads exclusively through official vendor websites and never through third-party distribution points. Security teams should implement DNS-level blocking for 91.92.241.250 and domain-level blocking for lemondesktop.me across all network security controls. Cryptocurrency wallet users should enable multi-factor authentication and monitor for unauthorized transaction attempts. Given the domain's current offline status, organizations should treat any future resolution attempts as high-priority security events requiring immediate investigation.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | lemondesktop.me |
malicious | Sinkholed |
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
VirusTotal-Analyse
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260617-69D183 Recipient: abuse@omegatech.sc Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.