lunaplay[.]top

The domain lunaplay.top has been identified as a phishing resource specializing in brand impersonation targeting the online gambling sector, specifically crypto casinos. Analysis confirms the domain mimics legitimate blockchain-based gambling platforms, presenting a page titled 'Lunaplay: Most Popular Online Crypto Casino Based on Blockchain.' The threat type is classified as elevated due to its potential for credential harvesting and financial fraud through deceptive user interfaces. Infrastructure analysis reveals the domain was registered through NameSilo, LLC on November 17, 2025, and resolved to the IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335). Detection metrics indicate the domain was flagged by 11 of 95 security vendors on VirusTotal, while appearing on a single blocklist maintained by PhishDestroy. Notably, the domain lacks an SSL certificate, further reducing its legitimacy. The creation date suggests recent deployment, aligning with observed patterns of short-lived phishing campaigns. At present, lunaplay.top has been taken offline, though residual risks may persist through cached content or secondary distribution channels. Organizations are advised to update web filtering rules to block the domain and associated IP address. Users who interacted with the site should reset credentials for any linked accounts, particularly cryptocurrency wallets or gambling platforms. Continuous monitoring of newly registered domains with similar naming conventions is recommended to preempt future impersonation attempts.