lightchaindesktop[.]live
“Lightchain Desktop App”
Detección almacenada
Alerta de encubrimiento
- Tipo de encubrimiento
content_split- Puntuación de encubrimiento
- 1/6
Resumen de las pruebas
lightchaindesktop.live — Crypto Drainer Investigation Report
PhishDestroy identifies lightchaindesktop.live as an active crypto drainer phishing domain masquerading as a legitimate desktop application for blockchain transactions. The threat actor employs a generic phishing approach to deceive users into connecting cryptocurrency wallets under the false pretense of accessing a secure desktop client. This operation is currently classified as active, with infrastructure designed to facilitate unauthorized fund transfers upon wallet connection.
This domain was flagged by 1 of 95 VirusTotal vendors, indicating it remains undetected by current antivirus engines as of the latest scan. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP address 216.198.79.65, which is associated with dynamic hosting environments commonly exploited for malicious activities. The domain was created on April 08, 2026, and operates under a Let’s Encrypt SSL certificate to establish false trust indicators. Trust scores for this domain and its associated infrastructure are currently under investigation, with no confirmed entries in major blocklists at this time.
Given the active status of lightchaindesktop.live and its potential to compromise cryptocurrency holdings, users and organizations are strongly advised to block this domain at the network level. Security teams should inspect DNS logs for resolutions to 216.198.79.65 and update firewall rules accordingly. Additionally, users should verify the authenticity of any desktop wallet applications through official channels and avoid interacting with unsolicited links or domains. Continuous monitoring of this domain is recommended, as detection rates may change with the release of new threat intelligence. Further updates will be provided as the investigation progresses.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260411-DEBAB6- Título de la página capturada
- Lightchain Desktop App
- Artefacto PDF
- Evidencia en PDF
Texto completo de la evidencia
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | lightchain.ai |
malicious | Sinkholed |
| DNS4EU | lightchain.ai |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of lightchaindesktop.live · checked Apr 11, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.