lumiohub[.]net

This domain is flagged for elevated-risk brand impersonation targeting MetaMask, a widely used cryptocurrency wallet service. The threat involves deceptive infrastructure designed to mimic legitimate platforms, specifically presenting itself as an NFT marketplace on the Gravity Network. Analysis indicates the domain was engineered to harvest user credentials, private keys, or seed phrases under false pretenses, posing a direct financial risk to victims. Infrastructure analysis reveals the domain lumiohub.net was registered on December 23, 2025, through HOSTINGER operations, UAB, and resolves to the IP address 82.29.191.104. Security vendor detections include 7/95 flags on VirusTotal, while Gridinsoft assigns a trust score of 0/100. The domain appears on six security blocklists and is actively blocked by MetaMask, Codeesura, Polkadot, SEAL, and PhishDestroy. The page title, 'Lumio - The NFT marketplace on Gravity Network,' aligns with tactics used to exploit users seeking legitimate decentralized applications. Mitigation steps for this threat type include verifying domain registration dates via WHOIS lookups before interacting with any platform claiming affiliation with MetaMask. Users should cross-reference official communications from the target brand to confirm legitimate domains. Network-level protections, such as blocking the IP 82.29.191.104 and enforcing blocklist updates, can prevent access to this domain. Additionally, security teams should monitor for similar impersonation patterns, including fake NFT marketplaces or Gravity Network-related scams, and educate users on recognizing phishing indicators in cryptocurrency ecosystems.