luckpax[.]com

This domain is classified as a high-risk brand impersonation threat targeting users of cryptocurrency-based gambling platforms. Analysis indicates the site mimics legitimate crypto casino services, presenting itself as a blockchain-based online casino under the name LUCKPAX. The intent appears to be credential harvesting or direct financial fraud through deceptive user engagement, leveraging the growing popularity of crypto gambling to exploit victims.

Infrastructure analysis reveals the domain was registered on July 31, 2025, through Key-Systems GmbH. It resolves to the IP address 69.5.189.55 and has been flagged by 14 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and is actively blocked by multiple browser-based security tools. Gridinsoft assigns a trust score of 1 out of 100, further confirming its malicious classification. The page title, "LUCKPAX | Play at the best online casino based on Blockchain," aligns with known impersonation tactics in the crypto gambling sector.

Mitigation steps for this threat type include immediate domain blacklisting across security gateways and endpoint protection systems. Network administrators should block traffic to the IP 69.5.189.55 and monitor for related domains registered through the same registrar. Users should be educated on verifying legitimate crypto gambling platforms through official channels, particularly those involving blockchain transactions. Financial institutions and crypto wallet providers should flag transactions originating from this domain or its associated infrastructure to prevent potential fraud.