Skip to content

Luxacas (luxacas.com) Security Report & Trust Score

Offline Last scanned: July 28, 2026
1 /100 High Risk

Category Parked

Domain is listed for sale

About luxacas.com

luxacas.com is a website categorized as Parked. Domain is listed for sale. It was last analyzed on July 28, 2026 and currently scores 1/100, which we rate as High Risk.

The domain was registered 2d ago. It is registered through Indirection Identity, LLC. The registration is set to expire on July 25, 2027. WHOIS privacy protection is not enabled. The domain is not signed with DNSSEC.

The site is hosted by AS16509 Amazon.com, Inc. in Seattle, United States. The server runs envoy. It resolves to the IP address 13.248.169.48.

10 of 92 antivirus engines flag this domain.

With a trust score of 1/100, luxacas.com sits in the highest-risk band of our scale. Multiple independent signals align with patterns commonly seen on fraudulent platforms. Exercise extreme caution before interacting with this website in any way.

Think you've been scammed? Get a free consultation with cyber-intelligence experts

Your information is secure and confidential.

Is Luxacas safe to use?

Based on our last scan on July 28, 2026, Luxacas (luxacas.com) has a trust score of 1/100, which we rate as High Risk. Multiple independent signals match patterns commonly seen on fraudulent platforms, so we advise extreme caution before interacting with it in any way.

Luxacas was registered only 2d ago. Very young domains deserve extra scrutiny: fraudulent operations typically abandon a burned domain and reappear under a new name within months, whereas established businesses usually build a much longer history on a single address.

10 antivirus engines already flag this domain. Detections tend to accumulate over time, so early flags on a young website are a meaningful warning rather than background noise.

The typical playbook of these scams

Think of the scam website as the last stage, not the first. What sets it in motion is human contact: an unsolicited message, a new "friend" from a dating app or messaging group, or a warm introduction on social media. That contact is cultivated patiently, often for weeks or months, until an "exclusive" investment tip feels like a natural next step. The industry name for this drawn-out grooming is pig butchering, a grim reference to fattening the target with trust before the payoff is taken.

With trust established, the target is funneled onto a polished platform whose numbers are pure fiction: the balances, the charts and the returns are all manufactured and steered entirely by the operators. A modest early withdrawal is occasionally allowed, a deliberate move to lower the victim's guard and invite a much bigger deposit. Try to cash out a meaningful amount, though, and everything changes: fresh "taxes", "release fees" or "verification charges" are demanded, the funds are held hostage until those are settled, and whatever you send after that vanishes.

Running in parallel is the clone firm, where scammers dress themselves up as a genuinely licensed business, reusing its name, logo and registration number, while quietly operating from a near-identical domain. It is the reason a stated license is only meaningful once you confirm it on the regulator's own website, and the reason the precise domain name carries just as much weight as the familiar brand shown beside it.

Signals that should make you pause

  • A guide you never asked for: a "coach", acquaintance or new online contact keeps steering you to one named site.
  • Risk-free pitch: profits are framed as safe and dependable, locked-in, sky-high, and supposedly free of any real downside.
  • Constant countdown: a relentless rush to commit, with disappearing bonuses or a deadline that always seems to be today.
  • Private-account transfers: they ask to be paid in cryptocurrency or gift cards, or by sending money straight to a private individual's account.
  • Missing from the register: their claimed authorization does not show up on the regulator's own register, assuming any license is mentioned at all.
  • Funds held back: getting your money out proves difficult, with fresh "taxes", "release fees" or repeated checks standing between you and your funds.
  • Straight-line gains: on screen the profits rise in a straight line, entirely detached from how the real market is moving.

Already lost money? Here is what to do next

  1. Break off every line of communication: step away from the platform and from whoever steered you toward it. Staying in touch only hands them fresh chances to take more, often through a fake "account manager" who pretends to be there to help.
  2. Pay nothing to unlock funds: do not send a single "release fee", "tax" or "unlock charge" to set a withdrawal free. Genuine providers subtract their fees from what you already hold; only fraudsters insist on extra money before you see a cent.
  3. Contact your bank without delay: reach out to your bank or card issuer as soon as you can. Because chargebacks and wire recalls have tight deadlines, acting fast is what gives you a realistic chance of getting money back.
  4. Save the proof: capture screenshots of the platform and your conversations, and hold on to emails, transaction references and any wallet addresses you paid into.
  5. Notify the regulators: alert the cybercrime or consumer-protection authority in your country, along with your national financial regulator.
  6. Distrust recovery pitches: treat any "fund recovery" firm that later promises to retrieve your losses for an advance fee with deep suspicion. Lists of victims are traded around, and this pitch is commonly the same scam coming back for more.

Threats

10 / 92 engines flagged

Antivirus engines

7
LLionicphishing
BitDefenderphishing
CCRDFmalicious
Show 4 more engines
Fortinetphishing
GG-Dataphishing
GGridinsoftphishing
SSophosmalware

Phishing authorities

1
CChong Lua Daomalicious

Security vendors

2
AalphaMountain.aiphishing
FForcepoint ThreatSeekerphishing

Blacklists

1 provider, all clear
  • google_safe_browsing community

Identity

WHOIS

RegistrarIIndirection Identity, LLC (IANA #706)
CreatedJuly 25, 2026
UpdatedJuly 26, 2026
ExpiresJuly 25, 2027
Domain age2d
DNSSECNot signed
Privacy protectionNo
Nameservers
  • ns1.afternic.com
  • ns2.afternic.com
  • verification-d3jclucsp89ganyqbydeny.ns101.verify.hn
Status
  • active

SSL

CertificateValid
IssuerGoDaddy.com, Inc.
SubjectGoDaddy Inc.
Valid fromOctober 1, 2025
Valid untilNovember 2, 2026
Expires inIn 66 days
ProtocolTLSv1.3
CipherTLS_AES_256_GCM_SHA384
SAN
  • godaddy.com
  • *.godaddy.com

Server

IP address13.248.169.48
IPv6
ASNAS16509
ProviderAS16509 Amazon.com, Inc.
CountryUnited States (US)
CitySeattle
Server softwareEenvoy

Screenshot

Screenshot of luxacas.com captured at the last scan
Captured at last scan

Forensics

Page timing

DNS lookup 3 ms
TCP connection 163 ms
TLS handshake 109 ms
Time to first byte 419 ms
Content download 90 ms
DOM content loaded 1,015 ms
Load complete 1,018 ms

Redirect chain

1
  1. https://forsale.godaddy.com/forsale/luxacas.com?utm_source=TDFS_BINNS&utm_medium=parkedpages&utm_campaign=x_corp_tdfs-binns_base&traffic_type=TDFS_BINNS&traffic_id=binns&

Network & resources

Total requests 45
Unique domains 7
Total size 763.6 KB
HTTPS 100.0%

Cookies

7
7 cookies
NameDomainFlags
currency.godaddy.com
pathway.godaddy.comSecure
visitor.godaddy.com
_policy.godaddy.com
ak_bmsc.godaddy.comSecure HttpOnly
fb_sessiontraffic.godaddy.comSecure
OPTOUTMULTI.godaddy.com

Technologies

4
  • React js-framework
  • Next.js meta-framework
  • Tailwind CSS css-framework
  • Bootstrap css-framework

Uptime

Last 30 days

0.0% uptime · 1,176 ms avg response