luckygreen-casino-aus[.]com

The domain luckygreen-casino-aus.com is currently classified as a generic phishing site and remains active as of 12 July 2026. It is listed as under investigation and has been blocked by the PhishDestroy blocklist. The domain was registered on 28 April 2026 through Fewmoretaps OU doing business as Trustname.com, indicating a recent creation that aligns with the observed malicious activity. Infrastructure analysis shows the domain resolves to the IP address 104.21.31.249, which is hosted by Cloudflare, Inc. in Canada. The authoritative nameservers are anna.ns.cloudflare.com and rommy.ns.cloudflare.com. The site presents a valid Let's Encrypt certificate signed with the E7 profile, enabling HTTPS connections despite the underlying malicious intent. An HTTP request returns a 403 status, suggesting that the page is protected or intentionally hidden from casual inspection. Threat intelligence sources report that the domain appears on a single security blocklist and carries a Gridinsoft trust score of 0 out of 100, reflecting a high confidence of malicious use. AlienVault OTX includes the domain in one pulse, further corroborating its association with phishing campaigns. VirusTotal currently shows 0 detections out of 95 scanners, which does not imply safety; the lack of detections is typical for newly created phishing infrastructure that has not yet been widely shared with scanning engines. Defenders should proactively block luckygreen-casino-aus.com at DNS and proxy layers and monitor outbound connections to the associated Cloudflare IP. Given the 403 response, manual browsing should be avoided; instead, analysts can retrieve the page content via a controlled sandbox or request capture to confirm the phishing payload. Continuous re‑evaluation is advised, as the domain may evolve or be incorporated into broader credential‑harvesting campaigns.