lobstrdesktopapp[.]com

PhishDestroy has identified lobstrdesktopapp.com as a high-risk phishing domain actively impersonating the legitimate LOBSTR wallet platform. This generic phishing threat specifically targets users of the Stellar and XRP Ledger ecosystems, attempting to harvest login credentials and private keys through a fake desktop application interface. The domain was flagged with a high risk level due to its deceptive nature and active status as of this report.

Technical indicators paint a concerning picture. The domain was registered on June 17, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with malicious registrations. While only 2 out of 95 security vendors on VirusTotal flag this domain, it appears on three separate security blocklists and resolves to IP address 64.29.17.1. The site uses a Let's Encrypt SSL certificate (YR2) to appear legitimate, and its page title reads "LOBSTR Desktop App – Simple and Secure Stellar & XRP Ledger Wallet" — a direct copy of the official branding. The domain's creation date, which is in the future relative to this report, suggests potential data manipulation or a placeholder entry, further undermining its credibility.

Users are advised to avoid interacting with lobstrdesktopapp.com under any circumstances. Never enter your Stellar or XRP wallet seed phrases, private keys, or login credentials on this site. Official LOBSTR wallet services are only available through the legitimate LOBSTR mobile app or the official website at lobstr.co. If you have already connected your wallet or entered sensitive information, immediately transfer your assets to a new wallet generated on a trusted device and enable two-factor authentication on any associated accounts. Report any losses to relevant authorities and monitor your wallet addresses for unauthorized transactions.