MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für luminite.icu
luminite[.]
The domain luminite.icu is a generic phishing site specifically designed to impersonate the Luminite Wallet brand, targeting cryptocurrency users with a fake login interface intended to drain their funds.
- VirusTotal
- 14/91
- Blocklists
- 2 · MetaMask, SEAL
- Verfügbarkeit
- Getarnt · erreichbar · HTTP 526
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
luminite.icu — Getarnt · erreichbar (HTTP 526). Betrugstyp: Crypto Drainer. Zusammenfassung der Beweislage: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 98/100. Registrar: NiceNIC.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain luminite.icu is a generic phishing site specifically designed to impersonate the Luminite Wallet brand, targeting cryptocurrency users with a fake login interface intended to drain their funds. As of the latest check, the domain is offline, but its infrastructure and indicators suggest it was actively used in a targeted campaign. This threat is classified as elevated risk due to its direct targeting of wallet credentials and the use of a recently registered domain.
Technical analysis reveals that luminite.icu was flagged by 2 out of 95 VirusTotal security vendors, indicating that while not universally detected, it was recognized as malicious by some antivirus engines. The domain was created on May 6, 2026, through the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, a known provider often associated with low-reputation domains. It resolves to IP address 188.114.97.3, which is linked to Cloudflare's CDN, a common tactic used by phishers to obfuscate their origin. The SSL certificate is issued by Let's Encrypt (E8), providing a false sense of security via HTTPS. Additionally, the domain appears on three security blocklists and has been logged in one AlienVault OTX threat intelligence pulse, confirming its inclusion in community threat feeds.
The site is currently taken offline, but users should remain vigilant. PhishDestroy strongly recommends that anyone who may have interacted with luminite.icu immediately revoke any permissions granted to the site and avoid connecting any cryptocurrency wallets to unknown platforms. Always verify the official Luminite Wallet URL through trusted sources before entering sensitive information. If credentials were entered, change them immediately and enable two-factor authentication on all associated accounts. Report any suspicious domains to threat intelligence platforms to help protect the broader community.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit Registrar context
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
SHORTDOT-ZONE · ÖFFENTLICHE BELEGE
.icu
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:44:22 UTC
VirusTotal-Analyse
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.