lumwax[.]com

lumwax.com is a phishing domain engaged in brand impersonation targeting the brand x.com, using a Gambler Scam cryptocurrency phishing kit. It posed an elevated risk before being taken offline and should not be considered safe. The site presented itself as a crypto casino but was designed to deceive users into fraudulent activities related to cryptocurrency.

Technical indicators for lumwax.com include detection by 1 of 95 VirusTotal vendors, specifically Gridinsoft, and presence on 1 security blocklist, PhishDestroy. The domain was registered through Web Commerce Communications Limited on September 08, 2025, and resolved to IP address 104.21.54.34 located in the US under AS13335 Cloudflare, Inc. No SSL certificate was issued for this domain, and its page title was 'Lumwax: Most Popular Online Crypto Casino Based on Blockchain'. Nameservers used were gail.ns.cloudflare.com and peyton.ns.cloudflare.com.

Users who encountered lumwax.com should consider any cryptocurrency transactions potentially compromised and move funds to new wallets, revoking token approvals where applicable. It is important to remain vigilant for phishing attempts and report any suspicious activity to relevant authorities or security platforms. Changing passwords and enabling two-factor authentication on associated accounts is recommended to mitigate credential theft risks. Reporting the domain to security blocklists and services like PhishDestroy helps protect others from this scam.