true-luck-slots[.]nl

The domain true-luck-slots.nl was registered through NameCheap, Inc. on October 07 2025 and is currently resolved to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site was hosted behind Cloudflare and served content over HTTP/3, with server‑side technologies identified as PHP, IPinfo, and Cloudflare Browser Insights. The SSL certificate presented is issued by Google Trust Services under the WE1 root, confirming a valid TLS handshake at the time of capture. The page title returned from the live host reads “True Luck Online Nederland Casino: Game Variety, Bonussen & Mobiele Functies,” indicating a casino‑oriented landing page that is unrelated to the legitimate brand ankr, which the infrastructure is documented to impersonate. Analysis of the hosting environment shows a Gridinsoft trust score of 0 out of 100, reflecting a highly untrusted classification.

The domain appears on a single public blocklist and was flagged by the PhishDestroy blocklist, confirming prior detection by at least one security provider. VirusTotal scans reported a single security vendor marking the domain as malicious, reinforcing the suspicion of abuse. The phishing kit associated with the site is identified as “Gambler Scam,” a known template used for crypto‑gambling fraud. The site’s current status is offline, suggesting that the operators have taken the infrastructure down or that mitigation actions have succeeded.

However, the underlying infrastructure—namely the Cloudflare‑protected IP address and the NameCheap registration—remains reusable for future campaigns. Defenders should continue to monitor the IP 188.114.96.3 for any re‑appearance of malicious content, enforce blocklisting of the domain in network and endpoint controls, and consider adding the domain to internal threat intelligence feeds.