lunamemecoin[.]com

Analysis of lunamemecoin.com shows a newly registered domain created on February 21 2026 and currently hosted behind Cloudflare infrastructure (AS13335, United States). The domain resolves to the IPv6 address 2606:4700:3037::ac43:ca9e and is served over TLS with a Google Trust Services / WE1 certificate. HTTP requests return a 403 status code and the page title presented by the server is "Suspected phishing site | Cloudflare". Nameserver delegation points to cullen.ns.cloudflare.com and davina.ns.cloudflare.com, confirming the use of Cloudflare DNS.

Registration was performed through MAT BAO CORPORATION. Multiple security controls have already acted on the domain: PhishDestroy has blocked it, it appears on one external security blocklist, and VirusTotal reports that 11 of 93 scanning vendors flag the domain as malicious. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. Detected technologies include Cloudflare services and HTTP/3, which are commonly leveraged to obscure attacker infrastructure.

The available evidence does not include any content analysis beyond the generic phishing page title, nor does it reveal a specific target brand, payload, or phishing kit. Consequently, the precise lure or victim profile remains uncertain. Defenders should immediately deny network traffic to lunamemecoin.com, add the domain and its associated IPv6 address to local and upstream blocklists, and monitor for any new subdomains or DNS changes under the same registrar or Cloudflare nameservers. Continuous re‑scanning of the domain on multi‑vendor platforms is advised to capture any evolving indicators.