luckspins[.]cc

On 23 July 2026, the domain luckspins.cc was observed hosting a crypto‑casino phishing page titled “Luckspins: Elon Musk’s Official Crypto Casino Powered by Blockchain”. The site was registered on 21 February 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED and resolves to the Cloudflare address 172.67.167.58, which belongs to AS13335 in the United States. The domain uses Cloudflare’s DNS service, as indicated by the authoritative nameservers huxley.ns.cloudflare.com and ines.ns.cloudflare.com, and does not present a TLS certificate, implying HTTP‑only access. Technical fingerprinting revealed the inclusion of Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights scripts, suggesting attempts to track visitors and possibly monetize traffic.

The page is associated with the “Gambler Scam” phishing kit, a known template used to lure victims into cryptocurrency fraud. VirusTotal analysis recorded 14 detections out of 95 scanned security engines, and the domain appears on a single external blocklist. Independent phishing mitigation service PhishDestroy has already taken the site offline, and the current status is listed as offline. No additional public Safe Browsing or Open Threat Exchange entries were found in the available intelligence.

Uncertainty remains regarding the extent of victim exposure, the specific cryptocurrency wallets targeted, and whether any credential harvesting was successful before takedown. Defenders should continue to monitor the IP address 172.67.167.58 for any repurposing, enforce blocklisting of the domain and its authoritative nameservers, and update intrusion detection signatures to flag the identified third‑party tracking scripts. Organizations that have employees or customers who may have interacted with luckspins.cc should advise them to change any cryptocurrency credentials and review account activity for unauthorized transactions.