luckxbeast[.]com

The domain luckxbeast.com was registered on 21 February 2026 through the registrar Spaceship, Inc. The zone is hosted on Cloudflare, using the nameservers arushi.ns.cloudflare.com and pranab.ns.cloudflare.com, and resolves to the IP address 104.21.14.221, which belongs to AS13335 Cloudflare, Inc., located in the United States. The site presented an SSL certificate issued by Google Trust Services under the WE1 intermediate, indicating that HTTPS connections were properly encrypted. VirusTotal records show that four of ninety‑three scanning engines flagged the domain, and the domain is listed on a single external blocklist. PhishDestroy has actively blocked the host, and Gridinsoft assigned a trust score of 1 out of 100, reflecting an extremely low reputation.

The page title returned by the live endpoint was "LUCKXBEAST | Open the world of luck and rewards!", but no additional content has been captured because the service is currently offline. The observed indicators align with a generic phishing operation: newly registered domain, use of reputable CDN infrastructure to hide origin, low trust scoring, and detection by multiple security vendors. However, the exact phishing campaign details—such as targeted brand, lure technique, or credential‑harvesting form—remain unknown because the site content has not been archived.

Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP address for any future activation, and consider adding the host to internal blocklists. Incident response teams encountering traffic to luckxbeast.com should treat any credential or payment data submitted as potentially compromised and advise affected users to change passwords and review account activity. Ongoing collection of HTTP request/response logs and any future page snapshots will be required to refine attribution and to confirm the specific phishing payload.