lunaland[.]app

This domain, lunaland.app, is flagged as a high-risk generic phishing site impersonating the Lunaland brand, an online crypto casino. Registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, the domain is currently active and resolves to IP 104.21.3.32, hosted by Cloudflare, Inc. in Canada. The SSL certificate is issued by Let's Encrypt (E8), and the HTTP status is 200. VirusTotal reports that 16 of 94 security vendors flag this domain, confirming malicious activity. The domain appears on one security blocklist and is already blocked by PhishDestroy. The phishing kit identified is Gambler Scam, suggesting a targeted campaign against cryptocurrency gambling users. Infrastructure analysis reveals the use of Cloudflare for content delivery and protection, along with Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights for tracking and monetization. The Gridinsoft trust score is 0/100, indicating no trustworthiness. Defenders should block this domain at the network level, add it to email security filters, and monitor for related subdomains or IP addresses. Users who may have interacted with this site should change credentials and enable multi-factor authentication on associated accounts. The exact page content beyond the title has not been analyzed, but the presence of a known phishing kit and high detection rate warrants immediate action. Uncertainty remains regarding the full scope of the phishing operation and any data exfiltration methods employed.