lunamemecoins[.]com

Analysis of lunamemecoins.com indicates that the domain was registered on 21 February 2026 through MAT BAO CORPORATION and is currently hosted behind Cloudflare’s network (AS13335) with the resolved address 172.67.190.146 located in the United States. The domain resolves to Cloudflare name servers lauryn.ns.cloudflare.com and mark.ns.cloudflare.com, and no TLS certificate was observed during the scan, suggesting the site served HTTP only or presented an invalid certificate. The HTTP response delivered a page whose title is “Just a moment…”, which provides no further contextual clues about the malicious payload.

Reputation checks show the domain appears on a single known phishing blocklist (PhishDestroy) and one of ninety‑three security vendors on VirusTotal flagged it, indicating at least one detection. Gridinsoft assigned a trust score of zero out of one hundred, reflecting a highly suspicious rating. No additional intelligence such as Safe Browsing alerts, OTX references, or kit attribution is present.

The limited observable data points to a generic phishing infrastructure that leverages Cloudflare’s CDN to obscure origin, lacks proper encryption, and has been actively blocked by at least one anti‑phishing service. Defenders should continue to block the domain at DNS and proxy layers, monitor the associated IP address for any future activity, and consider adding the domain to internal blocklists. Ongoing observation of the Cloudflare‑assigned IP range may uncover related campaigns, and any future HTTP content should be inspected for credential‑harvesting forms or redirection patterns.