lighters-dex[.]cam

The domain lighters-dex.cam is currently classified as a high‑risk generic phishing infrastructure. Technical checks show the web server returns HTTP 403, indicating the site is reachable but access is denied, a pattern often observed in active phishing campaigns that hide content behind authentication checks. The domain resolves to the IPv4 address 65.21.174.205 and is hosted on name servers ns41.link-host.net and ns42.link-host.net, both typical of bulk hosting providers. Registration data lists Global Domain Group LLC as the registrar, confirming a commercial registration pathway.

Threat intelligence platforms have recorded the domain on three distinct blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that multiple security vendors have identified it as malicious. VirusTotal scans report that five of ninety‑one security vendors flag the domain, providing additional corroboration of its malicious intent. No public page title or content analysis is available, so the specific lure or credential‑harvesting technique employed remains unknown.

Defenders should add the domain and its resolving IP address to deny‑list rules across firewalls, DNS filters, and endpoint protection suites. Continuous monitoring of the associated name servers and any future changes to the IP address is advised, as threat actors frequently shift hosting to evade takedown efforts. Organizations that rely on the blocked brands should educate users about unsolicited requests and enforce multi‑factor authentication to mitigate credential compromise risk.