lyneham-phase3[.]com

This domain, lyneham-phase3.com, is identified as a crypto drainer phishing site designed to compromise digital wallets and steal cryptocurrency assets. Visitors are typically lured into connecting their wallets under false pretenses, such as claiming rewards or verifying transactions, which triggers unauthorized transfers of funds to attacker-controlled addresses. The site employs social engineering tactics, often mimicking legitimate projects or platforms to appear credible. Analysis indicates the domain was registered on May 24, 2026, through NAMECHEAP INC, a registrar frequently abused for malicious infrastructure. It resolves to the IP address 79.125.4.228 and uses a Let's Encrypt SSL certificate, which provides encryption but does not validate legitimacy. Security vendors on VirusTotal flagged the domain 13 out of 95 times, and it appears on three security blocklists. Additionally, it is referenced in four threat intelligence pulses on AlienVault OTX, further confirming its malicious nature. If you visited lyneham-phase3.com or interacted with its content, immediately disconnect any connected wallets from the site and revoke permissions using a blockchain explorer or wallet management tool. Scan your device for malware, as phishing sites may deploy additional payloads. Monitor your wallet for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security platforms to assist in broader threat mitigation efforts.