luxer[.]bet

The domain luxer.bet was registered on 15 January 2025 through NameCheap, Inc. It resolves to the IP address 104.21.17.246, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The domain currently returns an HTTP 301 redirect and does not present an SSL/TLS certificate, indicating that traffic is unencrypted.

Threat intelligence classifies the site as a gambling scam. The page title "LUXER | Open the world of luck and rewards!" aligns with that claim. The domain appears on a security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis reports that 7 out of 95 scanned security vendors flagged the domain as malicious, and the Gridinsoft trust score is a low 1 out of 100, reinforcing the high‑risk assessment.

While the available data confirms the gambling‑scam categorization, the lack of an SSL certificate prevents verification of any additional payload or malicious scripts that might be delivered over HTTPS. Only a single nameserver is observed, and no further information about the underlying web application or potential phishing kit is disclosed. Consequently, the precise mechanisms used to deceive victims remain uncertain.

Defenders should treat luxer.bet as a high‑risk indicator. Immediate actions include adding the domain to deny‑list rules, blocking outbound connections to its IP, and monitoring DNS queries for look‑alike domains. Network sensors should be configured to alert on HTTP traffic to the domain, and any compromised hosts should be inspected for connections to the Cloudflare edge IP. Ongoing threat‑intel feeds should be consulted for updates, as additional malicious infrastructure may be associated with the same registrar or hosting provider.