lunentra-flux[.]com

The domain lunentra-flux.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'across'. It operates as a cryptocurrency scam, designed to deceive users into believing it is the official 'across' website, potentially leading to financial theft. As of the latest verification, lunentra-flux.com has been taken offline, though prior activity classified it as an elevated risk with no associated drainer kit detected.

Technical indicators confirm the malicious nature of lunentra-flux.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ESET and Kaspersky, and appears on 1 security blocklist (PhishDestroy). Registered through NETIM SAS on July 30, 2025, it resolved to the IP address 45.9.148.131, hosted in the Netherlands under AS49447 (Nice IT Services Group Inc.). The SSL certificate was issued by Let's Encrypt (E8), and the observed page title was 'Lunentra Flux | Official website India 2025'. Technologies detected on the site included Nginx, OpenResty, and IPinfo, with a Gridinsoft trust score of 0/100.

Users who interacted with lunentra-flux.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new cryptocurrency wallet. Monitor transaction histories for unauthorized activity and report the domain to relevant platforms, including the impersonated brand 'across', cryptocurrency security services, and local cybercrime authorities. If credentials were entered, change passwords for all associated accounts, enable multi-factor authentication, and remain vigilant for signs of fraud or identity theft.