MALICIOUS — CRITICAL
luna-launch.net için kimlik avı ve güvenlik kontrolü
luna-launch[.]
Analysis of luna-launch.net, created on 21 February 2026 and hosted by Namecheap (ASN 22612, IP 162.254.39.182, United States), shows multiple indicators of a crypto‑related brand‑impersonation campaign targeting Solana.
- VirusTotal
- 4/91
- Blocklists
- No stored match
- Kullanılabilirlik
- Bilinen son aktif · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 2 outgoing records; the latest is dated . The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
luna-launch.net — Bilinen son aktif (HTTP 200). Marka kimliğine bürünme: Solana; Dolandırıcılık türü: Crypto Scam. Kanıt özeti: VirusTotal 4/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft); PhishDestroy score 72/100. Kayıt kuruluşu: NameCheap.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Evidence Analysis
Analysis of luna-launch.net, created on 21 February 2026 and hosted by Namecheap (ASN 22612, IP 162.254.39.182, United States), shows multiple indicators of a crypto‑related brand‑impersonation campaign targeting Solana. The site presents the page title “Luna Launch – Solana Token Launcher”, explicitly referencing the Solana brand. The SSL certificate, issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36, is valid and matches the hosting provider, providing no immediate cryptographic warning but confirming the infrastructure’s legitimacy. HTTP requests return status 200, and the web server is identified as LiteSpeed, a common choice for fast‑flushing sites. Reputation services flag the domain as malicious.
VirusTotal records two detections out of ninety‑three scanned scanners, and Gridinsoft assigns a trust score of 0 / 100, indicating a high confidence of abusive use. The domain appears on one security blocklist and is listed by PhishDestroy as a blocked entity. Nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com are standard for Namecheap registrations, suggesting no custom DNS configuration designed to obscure ownership. The primary threat vector is brand impersonation: the domain’s title and implied service (“Token Launcher”) aim to lure Solana users into trusting the site for token creation or distribution, a known tactic in crypto scams. No definitive evidence of payload delivery or credential harvesting has been observed, and the page content has not been captured, leaving the exact mechanism of compromise uncertain.
Nevertheless, the combination of a low trust score, multiple vendor detections, and active blocklist inclusion justifies treating the site as a high‑risk malicious actor. Defenders should block inbound and outbound traffic to 162.254.39.182 and add luna-launch.net to URL filtering policies.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Veri kapsamı12 recorded checks
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 2 identified
High-performance web server compatible with Apache configurations.
VirusTotal Analizi
Arşivlenmiş Kanıtlar
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of luna-launch.net · checked Mar 2, 2026
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
“I tried to launch a coin on https://luna-launch.net/index.html to celebrate my favorite basketball teams victory. It didn't work so i contacted support (telegram link on their website) who said the had a glitch and would issue a refund. That didn't happen so the next day the support insisted that i give the support bot my recovery phrase to confirm the transaction. I argued with him because I knew not to ever give it out. Eventually I relented because if i didn't follow his directions how could”
PD-20260215-2BA2F7 Recipient: abuse@namecheap.com Victim safety and official reportingImmediate actions and verified reporting channels
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.