lunarwex[.]com

PhishDestroy identifies lunarwex.com as an active phishing domain engaged in credential harvesting, likely targeting users with spoofed login pages. The domain employs a Let’s Encrypt SSL certificate to appear legitimate, while VirusTotal analysis confirms minimal detection at 1 out of 95 security vendors, indicating a stealthy operation. Registered recently, this domain has already been listed on blocklists, highlighting its malicious nature. This domain poses an elevated risk due to its use of legitimate SSL certificates, which may deceive users into trusting the page. The low detection rate on VirusTotal suggests this domain is either newly active or employs evasion techniques to bypass security measures. Registrar data and creation date analysis further confirm its recent emergence, with blocklist counts reinforcing its malicious classification. The combination of these factors makes lunarwex.com a potent threat for credential theft. If users suspect interaction with lunarwex.com, they should immediately change passwords for any accounts exposed to this domain. Enable multi-factor authentication where possible and scan devices for malware. Users are advised to avoid visiting the domain and report the activity to their security teams for further investigation.