lunaais[.]com

This domain is flagged as an active phishing infrastructure targeting users of Luna blockchain services. The site presents itself as a legitimate blockchain intelligence platform under the title 'Luna — Blockchain Intelligence,' but analysis indicates it is designed to deceive visitors into disclosing sensitive credentials or financial information. The domain mimics trusted blockchain entities, increasing the likelihood of successful social engineering attacks against cryptocurrency users or investors. Infrastructure analysis reveals the domain was registered on September 13, 2025, through TuringSign Inc. d/b/a Cosmotown, a registrar often associated with newly created phishing domains. As of the latest scan, the domain has zero detections out of 95 engines on VirusTotal, suggesting it has not yet been widely flagged by automated security systems. It resolves to the IP address 91.204.209.50, hosted on AS52148 (Enix Ltd) in the United Kingdom, a network segment frequently utilized for malicious hosting. The SSL certificate is issued by Let's Encrypt, a common tactic to lend an appearance of legitimacy to fraudulent sites. Users who have visited lunaais.com should immediately revoke any credentials or wallet access shared with the site. Monitor financial accounts and blockchain transactions for unauthorized activity, particularly if cryptocurrency addresses or private keys were entered. Report the domain to relevant security teams or blocklist providers to aid in broader mitigation efforts. Avoid interacting with any links or downloads originating from this domain, as they may contain additional payloads or redirect to further malicious infrastructure. If browser sessions were active during the visit, clear cached data and reset any stored passwords as a precautionary measure.