lucky-star-casino[.]app

This domain is flagged as an elevated-risk phishing site designed to impersonate the legitimate Luckystar Casino brand. Analysis indicates the threat type is a generic phishing campaign targeting users through fraudulent gambling promotions, likely aiming to harvest credentials, financial details, or distribute malware under the guise of an official 2026 casino platform. Infrastructure analysis reveals the domain lucky-star-casino.app was registered on February 21, 2026, through NiceNIC International Group Co., Limited. It resolves to the IP address 188.114.97.3, which is associated with Cloudflare’s network, a common tactic to obscure hosting origins. The site employs Tailwind CSS and Yandex.Metrika for tracking, alongside HTTP/3 and a Google Trust Services SSL certificate to appear legitimate. Detection metrics show 6 out of 95 security vendors on VirusTotal flagged the domain, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Mitigation measures for this threat include immediate blacklisting of the domain and associated IP in network security controls. Organizations should update endpoint protection rules to detect and block phishing pages impersonating gambling or financial platforms. Users should be educated to verify domain authenticity, particularly for sites claiming to represent brands with future-dated content, such as the fraudulent 2026 branding observed here. Monitoring for additional domains registered through the same registrar or resolving to the identified IP may help identify related campaigns.