x-lucky[.]cc

The domain x-lucky.cc remains active with a high risk classification tied to brand impersonation of Google. Multiple indicators support this assessment, including a VirusTotal score of 6 out of 95 vendors and a Gridinsoft trust score of 0 out of 100. The associated page title Google Chrome ‑selain reinforces the impersonation pattern. The domain is listed on one blocklist maintained by PhishDestroy and returns an HTTP status of 200, confirming operational availability as of the report date.

Infrastructure details show resolution to IP address 142.251.143.4 in the United States under autonomous system AS15169. Registration occurred on February 21, 2026 via NiceNIC International Group Co., Limited, with nameservers set to ns1.nameserverhub.com and ns2.nameserverhub.com. An SSL certificate from Let's Encrypt under issuer R13 is in use. These elements establish a functional hosting setup without indicating the specific payload or landing page behavior.

Analysis indicates that the impersonation label derives directly from the page title and threat classification rather than broader campaign attribution. Uncertainties remain around the precise content delivered to visitors and any linkage to wider actor infrastructure. The creation date in early 2026 places the domain within normal operational timelines relative to the July 12, 2026 report date, offering no basis for temporal anomaly conclusions.

Defenders reviewing this domain should implement network-level blocks using the provided IP and domain string while monitoring for related resolutions through the listed nameservers. Cross-referencing traffic logs against the registrar and certificate details can help surface additional connected assets. Continued observation of blocklist updates and periodic re-evaluation of the domain status remain necessary steps given its confirmed active state.