luminite[.]icu

The domain luminite.icu is a generic phishing site specifically designed to impersonate the Luminite Wallet brand, targeting cryptocurrency users with a fake login interface intended to drain their funds. As of the latest check, the domain is offline, but its infrastructure and indicators suggest it was actively used in a targeted campaign. This threat is classified as elevated risk due to its direct targeting of wallet credentials and the use of a recently registered domain.

Technical analysis reveals that luminite.icu was flagged by 2 out of 95 VirusTotal security vendors, indicating that while not universally detected, it was recognized as malicious by some antivirus engines. The domain was created on May 6, 2026, through the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, a known provider often associated with low-reputation domains. It resolves to IP address 188.114.97.3, which is linked to Cloudflare's CDN, a common tactic used by phishers to obfuscate their origin. The SSL certificate is issued by Let's Encrypt (E8), providing a false sense of security via HTTPS. Additionally, the domain appears on three security blocklists and has been logged in one AlienVault OTX threat intelligence pulse, confirming its inclusion in community threat feeds.

The site is currently taken offline, but users should remain vigilant. PhishDestroy strongly recommends that anyone who may have interacted with luminite.icu immediately revoke any permissions granted to the site and avoid connecting any cryptocurrency wallets to unknown platforms. Always verify the official Luminite Wallet URL through trusted sources before entering sensitive information. If credentials were entered, change them immediately and enable two-factor authentication on all associated accounts. Report any suspicious domains to threat intelligence platforms to help protect the broader community.