casino-coin[.]cc

The domain casino-coin.cc was registered on December 27, 2025 through NiceNIC International Group Co., Limited and is currently taken offline. Its authoritative nameservers are sevki.ns.cloudflare.com and shubhi.ns.cloudflare.com, indicating reliance on Cloudflare’s DNS infrastructure. DNS resolution points to the IP address 172.67.160.247, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presented a page title reading “Casino-coin: Most Popular Online Crypto Casino Based on Blockchain,” suggesting an attempt to masquerade as a legitimate crypto‑focused gambling service. Analysis of the hosting environment shows the site employed a SSL certificate identified as WE1, confirming the use of HTTPS despite the domain’s illicit purpose.

Reputation services report a Gridinsoft trust score of 0 out of 100, reflecting an extremely low confidence rating. VirusTotal scans flagged the domain on 15 of 93 security vendor engines, indicating moderate detection across the ecosystem. The domain appears on a single blocklist and has been specifically blocked by the PhishDestroy service, confirming its classification as a phishing resource. Intelligence links the site to the Gambler Scam phishing kit and categorises the activity as a crypto‑scam, aligning with the advertised “crypto casino” premise.

While the site is offline, the infrastructure details—Cloudflare IP, registrar, and SSL configuration—remain observable and may be reused in future campaigns. Defenders should continue to block the IP address 172.67.160.247, monitor for re‑registration of the domain or similar‑sounding variants, and incorporate the observed indicators of compromise into threat‑intel feeds. Network sensors should be tuned to detect outbound connections to Cloudflare nodes associated with this IP, and email gateways should flag messages containing references to “Casino‑coin” or the known phishing kit name.