neon2lucks[.]top

Analysis of neon2lucks.top shows a newly registered domain created on February 21, 2026 and controlled through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP address 104.21.48.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The site was served over TLS using a certificate identified as WE1. DNS resolution points to two nameservers: ns2.verification-hold.suspended-domain.com.

and ns1.verification-hold.suspended, indicating a likely use of a generic verification‑hold service. The page title retrieved from the site reads "Neon2lucks: Most Popular Online Crypto Casino Based on Blockchain," and the threat classification is a generic phishing operation employing a Gambler Scam kit, consistent with the listed scam type of crypto scam. VirusTotal analysis recorded detections from 2 of 93 security vendors, suggesting partial malicious confidence. The domain appears on a single security blocklist and has been flagged by PhishDestroy, confirming that defensive feeds have already taken action.

As of the report date, July 23, 2026, the domain status is listed as offline, indicating that the hostile content is no longer actively reachable, though the underlying infrastructure remains allocated. Uncertainties remain regarding the extent of victim interaction, the specific phishing pages, and any credential harvesting mechanisms, as no visual or functional scrape of the site is available. Defenders should block neon2lucks.top at the network perimeter, add its hosting IP 104.21.48.1 to threat intelligence feeds, monitor for future re‑registration or similar naming patterns, and ensure that TLS inspection policies flag the WE1 certificate. Continuous observation of Cloudflare‑hosted assets tied to this ASN is recommended to detect any resurgence of the phishing kit.