lunapex[.]com

PhishDestroy identifies lunapex.com as an active crypto drainer phishing domain under investigation for high-risk fraudulent activity. This domain was flagged for its association with unauthorized cryptocurrency fund extraction mechanisms, designed to deceive users into unknowingly authorizing malicious wallet transactions. No specific drainer kit signatures are publicly available yet, but behavioral analysis suggests typical crypto-draining tactics such as fake wallet connection prompts and transaction manipulation interfaces. lunapex.com exhibits multiple red flags. VirusTotal currently reports 2/95 detections as of the latest scan, indicating it has not yet been widely blacklisted despite suspicious behavior. The domain resolves to IP 104.21.23.141 and is registered through Fewmoretaps OU d/b/a Trustname.com. It was created on April 01, 2026, unusually recent and possibly indicative of opportunistic fraud following market trends. The domain uses a Let's Encrypt SSL certificate, which is commonly abused to appear legitimate. It is not currently flagged in Google Safe Browsing (GSB) and has no known entries in major threat intelligence blocklists. As of this report, the domain remains active and the threat is classified as 'under investigation' by monitoring systems. Immediate actions include blocking the IP 104.21.23.141 and domain lunapex.com at network and endpoint levels. Users are advised to avoid interacting with any links or content from this domain, especially those involving cryptocurrency transactions or wallet connections. Remaining risk is high due to the domain's recent creation, low detection rate, and active status. Continuous monitoring and proactive blocking are recommended to mitigate potential losses.