Is lunula.icu a scam?

Our automated security review flags lunula.icu as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is lunula.icu safe to use?

No — lunula.icu scored 12/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does lunula.icu have a valid SSL certificate?

Yes. lunula.icu presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 86 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has lunula.icu been flagged by antivirus engines?

3 out of 92 antivirus engines in our malware network flagged lunula.icu as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.

Is lunula.icu on any phishing or malware blacklists?

No. lunula.icu is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is lunula.icu hosted?

lunula.icu resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the lunula.icu report updated?

This is a permanent record of the scan run on June 28, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around lunula.icu have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is lunula.icu legit or a scam?

Our verdict:Dangerous· 12/100

SafeSuspiciousDangerous

A confirmed phishing domain linked to crypto-drainer networks and flagged by LevelBlue and Fortinet for malicious activity.

Top reasons

Flagged as phishing by LevelBlue and suspicious by Forcepoint ThreatSeeker.Identified in threat intelligence reports with 11 separate detections for malicious activity.Linked to a network of known cryptocurrency scams and 'moonshot' impersonation sites.

lunula.icuScanned 1h ago

Post Facebook

Trust score

DANGEROUS

Heuristics 27·MT 5

Category tags

phishingcrypto fraud#phishing#crypto fraud95% MT confidence

Technical red flags (1)

3 of 92 engines flagged

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

3/92

Engines flagged this URL

Domain Age

—

Registration date unknown

MT Intelligence

Dangerous

Critical likelihood · 95% confidence

DANGEROUS

Critical risk detected

3 of 92 antivirus engines flag this page (1 outright malicious). Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

LIVE RENDER

lunula.icu

1Screenshot incomplete — site may be slow to render

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

High visual risk

Visual red flags detected in the screenshot

We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.

Visual risk50/100

What our vision model saw

1 signal

Screenshot incomplete — site may be slow to render

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Critical scam likelihoodengineMT · Guardiantrust5/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

Our analysis identifies this domain as part of a coordinated phishing infrastructure. LevelBlue and Fortinet have both flagged the site for phishing and spam, while our research found it listed in multiple threat intelligence databases alongside known crypto-scam domains. The site lacks any legitimate business registration or verifiable ownership. It appears to be a disposable asset used to host fraudulent content or harvest credentials. Given the lack of a functional business presence and the high number of security detections, the risk to users is extreme.

Full dossier

Analysis complete

Page Content

The site failed to render a complete interface during our analysis, which is a common trait for phishing pages that use obfuscation or are part of a short-lived campaign. There is no evidence of legitimate products, services, or contact information.

Infrastructure

The domain is hosted on a shared IP address (104.21.89.41) that is frequently used by high-volume web services but also hides the true origin of the server. While it uses a valid SSL certificate from Google Trust Services, this is a standard tactic for modern phishing sites to appear secure.

Domain History

WHOIS data for this domain is hidden or unavailable, preventing the verification of its owner. The .icu extension is a low-cost top-level domain often favored by bad actors for creating disposable scam sites.

Web Reputation

The domain has a poor reputation across our security network. It has been explicitly linked to other fraudulent domains like pollings-moonshot.com and usaofficialcoin.com, which are known for impersonating legitimate cryptocurrency brands to steal assets.

Risk Factors

Flagged as phishing by LevelBlue and suspicious by Forcepoint ThreatSeeker.
Identified in threat intelligence reports with 11 separate detections for malicious activity.
Linked to a network of known cryptocurrency scams and 'moonshot' impersonation sites.
No verifiable business registration or physical address found.
The domain has zero presence in global traffic indexes, suggesting it is not a legitimate business site.

Positive Signals

The site uses a valid SSL certificate to encrypt traffic.

AI Recommendation

Avoid this website entirely. Do not enter any passwords, credit card numbers, or cryptocurrency wallet recovery phrases, as they will be stolen by the site operators.

Scam network detected

2 linked domains correlated

This domain is part of a larger infrastructure used for cryptocurrency phishing and brand impersonation.

pollings-moonshot.comusaofficialcoin.com

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for lunula.icu, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

3 scam reports

Key findings

7 headline facts from open-web research

lunula.icu is listed with 11 detections on PhishDestroy.io threat intelligence reports for multiple phishing-related domains (e.g., pollings-moonshot.com impersonating Moonshot crypto brand and usaofficialcoin.com).
The domain appears in shared infrastructure contexts with other flagged phishing domains on services like PhishDestroy.
There is an active or recent report on urlquery.net for lunula.icu (report ID d604bf16-c90e-4556-8275-ce5081256d70), with a review request page warning against reviews solely because a site is malicious.
No legitimate website content, business info, reviews, or registration details found for lunula.icu.
Searches for the domain primarily return scam/phishing intelligence listings and unrelated medical references to "lunula" (nail anatomy).
Domain age is unknown; no WHOIS or historical data surfaced in results.
Associated with crypto/phishing ecosystem based on neighboring domains (Ledger, Moonshot, coin-related scams).

Scam reports (3)

Direct quotes from public scam databases, forums, and news.

PhishDestroyopen
"lunula.icu . 11 detections"
PhishDestroyopen
"lunula.icu . 11 detections"
urlquery.netopen
"URL: lunula.icu/ ... Attention: Do not request a review simply because a website is malicious!"

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research uncovered multiple scam reports for lunula.icu on independent threat intelligence platforms. The domain is specifically cited in reports alongside other fraudulent sites that impersonate crypto brands. No positive reviews or legitimate business registrations were found, and security analysts have warned against visiting the site due to its malicious nature.

Antivirus Engines

Detection matrix · live

3 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious2Suspicious55Harmless92Engines

of 92

LevelBlue

Malicious· phishing

Forcepoint ThreatSeeker

Suspicious· suspicious

Fortinet

Suspicious· spam

3 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresSep 23, 2026 (86d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

Do not interact with lunula.icu
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags lunula.icu as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — lunula.icu scored 12/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. lunula.icu presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 86 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
3 out of 92 antivirus engines in our malware network flagged lunula.icu as malicious or suspicious (1 outright malicious). Even one detection is a meaningful signal.
No. lunula.icu is not currently listed on the major browser blocklist feeds that modern browsers use.
lunula.icu resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 28, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around lunula.icu have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·lunula.icu

DANGEROUS

This is a malicious phishing domain linked to a network of cryptocurrency scams. Multiple security engines and threat intelligence reports confirm its involvement in fraudulent activity. Do not interact with this site or provide any personal information.

Avoid this website entirely. Do not enter any passwords, credit card numbers, or cryptocurrency wallet recovery phrases, as they will be stolen by the site operators.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

fanartikel-union-zeughaus.com

2h ago

Read the review

Dangeroustrust3

phl.madritbet50951.com

2h ago

Read the review

Dangeroustrust31

generate8aef6a.host47p.cfd

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.