spacedesktop[.]app

PhishDestroy identifies spacedesktop.app as a suspected crypto-drainer phishing domain under active investigation, posing a high risk to cryptocurrency holders. The domain mimics legitimate space-themed desktop wallet services to deceive users into connecting wallets and authorizing fraudulent transactions. Given the current lack of detection by security vendors and the malicious intent implied by the impersonation, immediate caution is advised for visitors or users considering interaction. This domain was flagged with 0 detections out of 95 VirusTotal scanners, uses a Let's Encrypt SSL certificate for false legitimacy, resolves to IP address 188.114.97.3, was registered on May 2, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently remains unblocked. The domain is newly created and rapidly aligning with known crypto-drainer infrastructure patterns. Trust scores across multiple threat intelligence platforms remain neutral due to its recent emergence, increasing the likelihood of undetected malicious activity. Crypto users should avoid visiting spacedesktop.app entirely. If you’ve already interacted, immediately disconnect your wallet, revoke any unauthorized permissions via your wallet’s interface, and transfer remaining assets to a cold wallet. Use blockchain explorers to monitor for suspicious transactions and report the domain to your wallet provider and relevant cybercrime units like the FBI IC3 or local cyber police. Enable hardware wallet authentication and avoid entering seed phrases or private keys on any web interface linked from this domain. Always verify wallet URLs via official project channels before any interaction.