lightes[.]xyz

The domain lightes.xyz was registered on December 28, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently hosted on Cloudflare’s network (AS13335, United States). DNS resolution points to 172.67.165.116 and the authoritative nameservers are miguel.ns.cloudflare.com and sky.ns.cloudflare.com. No SSL certificate is present, indicating the site does not serve traffic over HTTPS. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious use. VirusTotal analysis shows that three of ninety‑three scanning engines flagged the domain, confirming at least limited detection by security vendors. The site’s current status is offline, which limits active investigation but suggests that the infrastructure may be re‑used in future campaigns.

Defenders should continue to monitor DNS queries for lightes.xyz and its associated Cloudflare IP address, enforce blocklist updates that include this domain, and consider adding the IP range 172.67.165.0/24 to outbound filtering rules. Because the domain lacks TLS, any attempt to reach it over HTTPS will fail, providing an additional mitigation surface. Threat intelligence teams should log the registration details, note the registrar, and watch for similarly patterned domains that resolve to the same Cloudflare edge nodes, as attackers often reuse the same hosting environment for multiple phishing operations.