lunapump[.]pro

The domain lunapump.pro is currently active and has been classified as a brand‑impersonation campaign targeting Solana. Registration data shows the domain was created on 08 June 2026 through Global Domain Group LLC and resolves to the IP address 163.61.188.9, which is geolocated to the United States and associated with a MIT‑based facility. The site serves content over HTTPS using a Let’s Encrypt certificate (YR1) and returns HTTP 200 responses. Infrastructure fingerprints indicate the use of LiteSpeed web server with HTTP/3 support. The page title retrieved from the live site reads “LunaLaunch | Build a Solana Token Fast,” confirming the Solana‑related theme. Threat intelligence feeds have placed lunapump.pro on a single security blocklist and PhishDestroy has already blocked it. VirusTotal scans show six of ninety‑one scanners flag the domain as malicious, and Gridinsoft assigns a trust score of 15 / 100, reflecting a low confidence in its legitimacy. No deeper content analysis is available beyond the page title, so the exact malicious payload or user‑interaction flow remains unknown. Defenders should add lunapump.pro and its resolving IP to network‑level blocklists, monitor for any related DNS or certificate changes, and update detection rules to capture traffic to LiteSpeed/HTTP‑3 endpoints serving the identified page title. Ongoing observation of the domain’s hosting infrastructure is recommended to detect potential relocation or repurposing.