linkage-nexus-cluster-light[.]com
“Wallet Connect”
linkage-nexus-cluster-light.com — error del servidor (HTTP 502). Suplantación de marca: WalletConnect; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 10/95 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, Fortinet); 1 external blocklist match (ScamSniffer); PhishDestroy score 80/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain linkage-nexus-cluster-light.com has been identified as an elevated risk due to brand impersonation targeting WalletConnect. Investigative review shows that the site’s page title is ‘Wallet Connect,’ closely mimicking the legitimate brand to mislead users, which is typical in crypto-drainer and credential phishing attacks. The intent appears to be harvesting sensitive user data by simulating a trusted platform.
Technical analysis reveals several threat indicators. VirusTotal currently lists 10 out of 95 security vendors flagging this domain as malicious, highlighting broad industry recognition of its risk. The domain was registered through NiceNIC International Group Co., Limited and first appeared on August 23, 2025. DNS resolution historically pointed to IP address 172.67.186.199. External intelligence sources confirm that linkage-nexus-cluster-light.com is listed on two independent security blocklists, including PhishDestroy and ScamSniffer. Additionally, it has a trust score of 0/100 from Gridinsoft. The domain’s current status is offline, and it has been blocked by major anti-fraud systems, reducing its immediate threat exposure.
Given the domain is now offline, the primary risk to users is minimized, but forensic monitoring and threat intel updates are advised. Continued vigilance remains necessary as similar domains may emerge using the same registrar or infrastructure to target WalletConnect users. Stakeholders should ensure users are educated about identifying impersonation schemes and always verify domain integrity before entering any credentials. Reporting related suspicious domains to relevant security teams is also recommended to mitigate future risks.
Inteligencia de seguridad de red Registrar context
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-15 03:09:27 UTC
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.