lineamoon[.]fun

lineamoon.fun is an active domain registered on March 25 2026 through Hostinger operations, UAB. The site presents the page title “Lmoon Linea” and purports to target the Linea brand, indicating a brand‑impersonation campaign. Infrastructure analysis shows the domain resolves to IP 64.29.17.65, a Vercel‑hosted address located in the United States, and is served over HTTPS with a Let’s Encrypt R12 certificate. The HTTP response is a 307 redirect, and the DNS configuration uses Vercel’s authoritative name servers (ns1.vercel‑dns.com, ns2.vercel‑dns.com). Detected technologies include Vercel hosting and HTTP Strict Transport Security (HSTS). The domain has been listed on a security blocklist and was previously blocked by PhishDestroy. VirusTotal scans report four of ninety‑four security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the high‑risk assessment. No additional content analysis is available beyond the page title, so the exact visual or functional mimicry cannot be confirmed. Defenders should treat the domain as malicious, enforce blocking at network and endpoint layers, monitor DNS queries for the associated IP and name servers, and consider adding the domain to internal blacklists. Ongoing observation is advised to detect any changes to the hosted content or redirection behavior.