betlux[.]us

The domain betlux.us is a confirmed phishing site engaged in brand impersonation, specifically targeting users of the Ethereum cryptocurrency platform. It operates as a gambling scam, luring victims with fraudulent promises of sports betting and stakes rather than directly deploying a crypto drainer kit. As of the latest verification, betlux.us has been taken offline, though its prior activity remains a risk to those who may have interacted with it.

Technical indicators confirm the elevated risk posed by betlux.us. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered on 2025-08-10 19:08:04 through Web Commerce Communications Limited and resolves to the IP address 57.129.97.29, hosted by OVH SAS in Germany. No SSL certificate was issued, and the observed page title was 'BETLUX | Enter the world of sport and stakes!'. The domain uses Cloudflare nameservers (lorna.ns.cloudflare.com and vasilii.ns.cloudflare.com). Trust scores from Gridinsoft and Scamadviser were 0/100 and 39/100, respectively, further indicating its malicious nature.

Users who visited betlux.us should assume their credentials or personal information may have been compromised. While no crypto drainer kit was detected, those who connected wallets should revoke any token approvals and monitor for unauthorized transactions. Change passwords for any accounts accessed on the site and enable two-factor authentication where possible. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime units to aid in takedown efforts and prevent further victimization.