friends[.]lumyna[.]io

The domain friends.lumyna.io is a phishing site engaged in brand impersonation targeting Discord users. It presents itself as a legitimate Discord-related event page titled 'Blackwing Event' to deceive victims into disclosing login credentials or other sensitive information. No crypto drainer kit was identified, but the site poses an elevated risk due to its social media scam tactics. As of the latest verification, friends.lumyna.io has been taken offline.

Technical indicators confirm the malicious nature of friends.lumyna.io. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Ermes and Gridinsoft, and appears on 1 security blocklist (PhishDestroy). It was created on 2026-02-21 07:01:08 and resolves to the IP address 104.26.3.106, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title is 'Blackwing Event'. Google Safe Browsing has not flagged the domain at this time.

Victims of friends.lumyna.io should immediately change their Discord passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent from the account. Report the phishing domain to Discord’s official support channels and consider submitting it to platforms like PhishTank or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.