lunocas[.]com

This domain, lunocas.com, was flagged as a crypto scam targeting users through a fraudulent online casino platform. Analysis indicates it was taken offline following detection by PhishDestroy, with no active resolution at the time of assessment. The domain resolved to IP 172.67.138.37, hosted on Cloudflare's infrastructure (AS13335), a common pattern for phishing sites leveraging CDN services to obscure hosting origins. Nameservers (carlane.ns.cloudflare.com, max.ns.cloudflare.com) further confirm Cloudflare's role in its DNS configuration.

The domain was registered on August 30, 2025, through Web Commerce Communications Limited, a registrar frequently associated with malicious domains due to its low barrier for registration and minimal oversight. Gridinsoft assigned a trust score of 1/100, reflecting high-risk classification based on historical abuse patterns. Eleven of 95 security vendors on VirusTotal flagged the domain, though the absence of an SSL certificate may have contributed to lower detection rates, as modern browsers block non-HTTPS sites by default. The page title, 'Lunocas: Most Popular Online Crypto Casino Based on Blockchain,' aligns with the identified 'Gambler Scam' phishing kit, suggesting an attempt to lure victims with promises of crypto gambling rewards.

Defenders should treat this domain as high-risk despite its offline status, as infrastructure reuse is common in phishing campaigns. Blocklist inclusion and prior takedown by PhishDestroy provide actionable indicators for network-level blocking. No evidence links this domain to legitimate brands, and the exact content or user interaction flow remains unanalysed due to its offline status. Monitoring for re-registration or DNS reactivation is recommended, particularly under the same registrar or Cloudflare nameservers.