lemoncasino-dk[.]com

Analysis of lemoncasino-dk.com indicates that the domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently offline. The authoritative nameservers aryanna.ns.cloudflare.com and tim.ns.cloudflare.com resolve the domain to the Cloudflare‑owned address 172.67.209.106, which is associated with ASN 13335 located in the United States. No TLS certificate was presented for the site, confirming that HTTPS was not configured at the time of observation.

The page title returned by the server was "Lemon Casino Officiel hjemmeside DK," matching the reported scam type of crypto gambling. The domain has been listed on a single security blocklist and was actively blocked by the PhishDestroy service. VirusTotal scans show that three of ninety‑three security vendors flagged the domain as malicious, reinforcing the suspicion of illicit activity.

Given the combination of a recently created domain, Cloudflare front‑end infrastructure, lack of encryption, and concrete detections by multiple vendors, defenders should treat lemoncasino-dk.com as a confirmed crypto‑gambling phishing vector. Recommended mitigation actions include adding the domain to network‑level deny lists, updating endpoint security signatures to reflect the three vendor detections, and monitoring for any new domains registered with the same registrar or using the same Cloudflare nameservers that exhibit similar page titles or scam classifications. Continuous observation of threat‑intel feeds for related indicators of compromise will aid in early identification of successor campaigns.