Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 4 outgoing records; the latest is dated . The recorded recipient is domainabuse@tucows.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
luckyrizon[.]com
Verifica phishing e sicurezza per luckyrizon.com
“Luckyrizon: Most Popular Online Crypto Casino Based on Blockchain”
luckyrizon.com — Ultimo attivo conosciuto (HTTP 200). Simulazione del marchio: Genericcrypto; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 12/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. Registrar: Tucows.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
This domain, luckyrizon.com, was registered through Tucows Domains Inc. on February 21, 2026 and is currently hosted behind Cloudflare's network (ASN 13335, United States). DNS resolution points to 188.114.97.3, and the authoritative nameservers are hans.ns.cloudflare.com and jamie.ns.cloudflare.com. The site serves content over HTTPS using a Google Trust Services certificate issued to the WE1 certificate authority, indicating a valid TLS handshake. An HTTP GET returns status code 200, confirming the presence of an active web service. The page title retrieved from the live host reads “Luckyrizon: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the classified scam type of a crypto‑focused gambling operation.
Automated analysis tags the site with the “Gambler Scam” phishing kit, suggesting reuse of a known template for financial fraud. VirusTotal has recorded 13 detections out of 93 scanning engines, reflecting a moderate consensus among security vendors that the domain is malicious. The domain is listed on a single public blocklist, PhishDestroy, reinforcing its reputation as a phishing vector. Technology fingerprints show Cloudflare Browser Insights and Cloudflare services, which are typical for fast‑acting malicious infrastructure.
No additional public intelligence, such as safe browsing status or open‑source threat feed entries, is presently available. The combination of recent registration, active TLS, Cloudflare hosting, and vendor detections indicates an operational campaign targeting cryptocurrency users. Defenders should block the domain at DNS or proxy layers, monitor outbound connections to the IP address 188.114.97.3, and consider adding the host to internal threat‑intel feeds. Continuous re‑evaluation is advised, as the threat actor may modify hosting or employ additional domains to evade detection.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Cronologia delle segnalazioni di abuso · 4 stored reports over 26 days · click to expand
-
Report #1 Feb 8, 2026 · 18:29 UTCPhishing Abuse Report: luckyrizon[.]comdomainabuse@tucows.com
-
Report #2 ICANN CC 148h still active Feb 14, 2026 · 23:07 UTCESCALATION #2 (148h active): Phishing - luckyrizon[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 582h still active Mar 5, 2026 · 01:23 UTCESCALATION #3 (582h active): Phishing - luckyrizon[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 617h still active Mar 6, 2026 · 11:33 UTCESCALATION #4 (617h active): Phishing - luckyrizon[.]comdomainabuse@tucows.com abuse@verisign-grs.com compliance@icann.org
Tecnologie · 2 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comAnalisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
PD-1770575271-luckyrizon.com Recipient: domainabuse@tucows.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo