lucky50[.]us

The domain lucky50.us was a generic phishing site targeting cryptocurrency users with a fraudulent online casino theme. It posed an elevated risk by luring victims into depositing funds under the false pretense of a blockchain-based gambling platform. No legitimate brand was impersonated, and no drainer kit was identified. The site is currently taken offline, but prior activity classified it as a cryptocurrency scam.

Technical indicators confirm the malicious nature of lucky50.us. The domain was flagged by 3 of 95 VirusTotal security vendors, including alphaMountain.ai, Fortinet, and SOCRadar. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through Web Commerce Communications Limited on August 18, 2025, the domain resolved to IP address 104.21.66.60, hosted by Cloudflare, Inc. (AS13335). No SSL certificate was issued, and the observed page title was 'LUCKY50 | Play at the best online casino based on Blockchain'. Nameservers were ignacio.ns.cloudflare.com and nelly.ns.cloudflare.com, and Gridinsoft assigned a trust score of 0/100.

Victims of lucky50.us should immediately cease all interaction with the site. Since this was a cryptocurrency scam, users should review wallet transactions for unauthorized transfers, revoke any suspicious token approvals, and move remaining funds to a new wallet. Enable two-factor authentication on all financial and crypto-related accounts. Report the domain to relevant authorities, including local cybercrime units, the FBI’s Internet Crime Complaint Center (IC3), and platforms like ScamAdviser or PhishTank to aid in takedown efforts.