lunodex[.]com

The domain lunodex.com was registered on 21 February 2026 through Hello Internet Corp. It resolves to the Cloudflare address 104.21.30.33, which is associated with ASN 13335 (Cloudflare, Inc.) and is geolocated to the United States. No TLS certificate is presented, indicating the site operated without HTTPS encryption. The page title returned from the now‑offline host reads “Lunodex: Elon Musk’s Official Crypto Casino Powered by Blockchain,” which explicitly invokes the name of Elon Musk and suggests a cryptocurrency‑based gambling service. The brand target field lists x.com, confirming that the adversary intended to impersonate the X platform. Classification from the intelligence feed identifies the operation as a crypto‑scam leveraging the “Gambler Scam” phishing kit.

Reputation signals are uniformly negative. The Gridinsoft trust score registers 0 out of 100, the lowest possible rating. VirusTotal analysis shows that 13 of 93 scanning engines flagged the domain as malicious. The domain appears on a single external blocklist, PhishDestroy, which has already taken the site offline. No SSL certificate, low trust score, and multiple vendor detections collectively indicate a high confidence of malicious intent.

Uncertainties remain regarding the current activity of the underlying IP address, as Cloudflare often hosts unrelated legitimate traffic. No explicit Safe Browsing or Open Threat Exchange records are available, and the lack of additional blocklist listings limits the view of broader distribution. Because the site is already taken offline, immediate containment actions focus on preventing accidental resolution by end‑users. Defenders should add lunodex.com to DNS‑based deny lists, enforce blocklist updates that include PhishDestroy entries, and monitor the 104.21.30.33 address for parallel campaigns that may reuse the same infrastructure.