novaluck777[.]com

This domain, novaluck777.com, was registered on 18 June 2025 through Hello Internet Corp and resolves to the IPv4 address 57.129.97.29, which is announced by AS16276 (OVH SAS) and geolocated to Germany. The authoritative name servers are listed as asa.ns.cloudflare.com and gannon.ns.cloudflare.com, indicating use of Cloudflare DNS infrastructure. No TLS certificate is presented for the host, and the site is currently taken offline, which aligns with the reported status of being offline at the time of analysis. The page title observed during the brief crawl was “NOVALUCK777 | Enter the world of sport and stakes!”, a generic sports‑betting phrasing that does not reference the targeted brand. Nonetheless, the domain is classified as a brand‑impersonation campaign that purports to impersonate Ethereum, as indicated by the intelligence tag “Impersonates: ethereum”.

The scam type is recorded as “Brand Impersonation”, and the risk level has been assigned as elevated. Reputation services provide corroborating evidence of malicious intent. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist where it is listed by PhishDestroy. VirusTotal analysis shows that one out of ninety‑five scanned security vendors flagged the domain, reinforcing the suspicion of abuse.

The lack of an SSL certificate, combined with the low trust score and blocklist entry, suggests the site was likely used for fraudulent activities before being taken down. Defenders should continue to block outbound connections to 57.129.97.29 and enforce DNS filtering for novaluck777.com. Monitoring for any re‑registration of the domain or similar permutations is recommended, as threat actors may attempt to resurrect the campaign using comparable branding. The presence of Cloudflare name servers indicates that the infrastructure could be reused for future impersonation attempts, so updating allow‑lists and threat‑intel feeds with this indicator is prudent.