lunarexpro[.]net

On July 24, 2026, lunarexpro.net was observed as a high‑risk brand‑impersonation site targeting the “base” brand. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created on March 03, 2026. DNS resolution points to the Cloudflare address 104.21.53.142, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. No TLS certificate is presented; the site serves HTTP without encryption. The page title returned from the live host reads “LunarexPro – Sito Ufficiale in Italia [2025]”, confirming the use of the brand name in the content.

Gridinsoft assigns a trust score of 0 out of 100, indicating a highly untrusted reputation. VirusTotal analysis shows that 3 of 95 security vendors have flagged the domain, and Google Safe Browsing identifies it as a social‑engineering threat. The domain appears on three external blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Nameservers are chin.ns.cloudflare.com and watson.ns.cloudflare.com, both operated by Cloudflare.

Current network status shows the domain taken offline, but historical evidence demonstrates that it was reachable and used for malicious purposes. Uncertainty remains regarding the exact phishing payload or credential‑collection mechanisms because no page content beyond the title has been captured. Defenders should continue to block the domain at perimeter devices, update URL filtering rules, and monitor for any re‑registration attempts. Threat intelligence feeds should retain the indicator set (domain, IP, nameservers, registrar) to support correlation with future incidents.