luckspins[.]cc
“Luckspins: Elon Musk’s Official Crypto Casino Powered by Blockchain”
Zusammenfassung der Beweislage
On 23 July 2026, the domain luckspins.cc was observed hosting a crypto‑casino phishing page titled “Luckspins: Elon Musk’s Official Crypto Casino Powered by Blockchain”. The site was registered on 21 February 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED and resolves to the Cloudflare address 172.67.167.58, which belongs to AS13335 in the United States. The domain uses Cloudflare’s DNS service, as indicated by the authoritative nameservers huxley.ns.cloudflare.com and ines.ns.cloudflare.com, and does not present a TLS certificate, implying HTTP‑only access. Technical fingerprinting revealed the inclusion of Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights scripts, suggesting attempts to track visitors and possibly monetize traffic.
The page is associated with the “Gambler Scam” phishing kit, a known template used to lure victims into cryptocurrency fraud. VirusTotal analysis recorded 14 detections out of 95 scanned security engines, and the domain appears on a single external blocklist. Independent phishing mitigation service PhishDestroy has already taken the site offline, and the current status is listed as offline. No additional public Safe Browsing or Open Threat Exchange entries were found in the available intelligence.
Uncertainty remains regarding the extent of victim exposure, the specific cryptocurrency wallets targeted, and whether any credential harvesting was successful before takedown. Defenders should continue to monitor the IP address 172.67.167.58 for any repurposing, enforce blocklisting of the domain and its authoritative nameservers, and update intrusion detection signatures to flag the identified third‑party tracking scripts. Organizations that have employees or customers who may have interacted with luckspins.cc should advise them to change any cryptocurrency credentials and review account activity for unauthorized transactions.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260219-21F15C- Titel der erfassten Seite
- Luckspins: Elon Musk’s Official Crypto Casino Powered by Blockchain
- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Section 3.1 of AUP: The domain luckspins.cc is engaged in phishing activities, which are expressly prohibited under your Acceptable Use Policy.
Section 5.2 of TOS: The domain has been used to facilitate fraud and deception, warranting immediate suspension or termination of services as stipulated in your Terms of Service.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. federal law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities through electronic communications.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits misleading information, which is relevant to phishing activities.
Regulatory Note: Failure to act on this report may expose your organization to liability under applicable laws and regulations, which could result in significant legal consequences. Immediate action is advised to mitigate potential risks.
Meldeverlauf 1
- Meldung 1 ⚠️ ESCALATION #2 (351h active): Phishing - luckspins[.]cc
Data Coverage
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 13.08.2026
Erkennungszeitleiste
-
Cloudflare Radar
Cloudflare-Radar-Scan gespeichert · Scan öffnen
-
Domainstatus
Erreichbar → Nicht erreichbar
-
Cloudflare Radar
Cloudflare-Radar-Scan gespeichert · Scan öffnen
-
Cloudflare Radar
Cloudflare-Radar-Scan gespeichert · Scan öffnen
Casino / Gambling License Verification
VirusTotal-Analyse
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt