lugospin[.]com

Analysis indicates that the domain lugospin.com was registered on 21 February 2026 via Hello Internet Corp and is currently hosted behind Cloudflare's network (AS13335) with the address 172.67.175.169 located in the United States. The domain uses an SSL certificate identified as WE1, and its authoritative name servers are ns100.webnic.cc and ns101.webnic.cc. The publicly visible page title reads “LUGOSPIN | Open the world of luck and rewards!”, which does not contain any reference to the targeted brand, but the intelligence file tags the site as impersonating the foundation brand. The site has been classified as a brand‑impersonation scam. VirusTotal submissions show that two of ninety‑three scanning engines flagged the domain, indicating some malicious indicators, though the majority of scanners did not raise an alert.

The domain appears on one external security blocklist and has been actively blocked by the PhishDestroy service. At the time of analysis the host returned an offline HTTP status, which suggests the site has been taken down or is otherwise inaccessible. Defenders should note the recent creation date and the use of reputable hosting infrastructure, which can be leveraged to evade simple reputation‑based filters. The presence of the SSL certificate and Cloudflare IP address may allow the domain to inherit the reputation of the underlying CDN, complicating detection.

Monitoring should include continued observation of the IP address for any re‑use, and the addition of the domain to internal blocklists across email gateways, web proxies, and endpoint protection suites. Because the page title and the brand impersonation claim are the only publicly visible artifacts, threat‑intel feeds that correlate brand‑specific phishing campaigns should be queried for any related indicators.