luno88[.]com

Analysis as of July 24 2026 indicates that the domain luno88.com was registered on August 27 2025 through Gname.com Pte. Ltd. and is hosted on the IP address 156.244.20.138, which belongs to AS138915 Kaopu Cloud HK Limited located in the Republic of Korea. The domain resolves to this single IPv4 address and uses the authoritative name servers a2.share-dns.com and b2.share-dns.net. No TLS certificate is presented, meaning communications are unencrypted. The page title returned from the host is the bare string “luno88.com”.

Threat intelligence platforms have placed the domain on one security blocklist and PhishDestroy has also blocked it. VirusTotal scanning shows that 2 of 95 AV engines flagged the domain as malicious, confirming a low‑to‑moderate detection consensus. The classification supplied is generic phishing, suggesting the site is intended to harvest credentials or personal data, although the exact lure or target brand is not disclosed. The domain is currently offline, which may indicate takedown or temporary suspension.

Uncertainty remains regarding the specific phishing kit, the victim population, and whether additional infrastructure such as command‑and‑control servers is linked to the same IP range. Defenders should continue to block the domain at the network perimeter, monitor DNS queries for the associated name servers, and add the IP address to blacklist feeds. Organizations using threat‑intelligence feeds should treat the 2/95 detection as an indicator of compromise and consider correlating any recent credential‑theft alerts with activity toward this host. Ongoing observation of the registrar Gname.com Pte. Ltd. for new registrations may help detect future campaigns using a similar supply chain.