volnaluck[.]com

Analysis of volnaluck.com, a domain created on August 27, 2025 and currently taken offline, shows a clear association with a crypto‑focused gambling scam. The public page title reads "Volnaluck: Most Popular Online Crypto Casino Based on Blockchain," indicating the site’s pretended service. Registration data lists PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar, and the domain is delegated to Cloudflare’s authoritative nameservers igor.ns.cloudflare.com and olivia.ns.cloudflare.com. DNS resolution points to IP address 172.67.169.149, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States.

No SSL certificate is observed for the host, suggesting the site was served over plain HTTP before being shut down. Reputation checks reveal a Gridinsoft trust score of 1 out of 100 and inclusion on a single security blocklist. VirusTotal analysis recorded 12 detections out of 95 scanned security vendors, reinforcing the malicious classification.

The domain appears on the PhishDestroy blocklist and is identified as employing the Gambler Scam phishing kit, consistent with the declared crypto‑scam type. Defenders encountering references to volnaluck.com should block the domain at perimeter defenses, update URL filtering and DNS sinkhole lists, and monitor for any reuse of the underlying Cloudflare IP range. Since the site is already offline, ongoing threat monitoring should focus on potential re‑registration or the deployment of similar kit variants by the same threat actor.