coin-volcano-casino[.]co

The domain coin-volcano-casino.co is flagged as a cryptocurrency phishing site targeting users through fraudulent gaming offers. Analysis indicates the domain impersonates legitimate online casino platforms to distribute malicious software under the guise of slot game downloads. The page title, 'Coin volcano casino – Download Slots,' explicitly promotes executable content, a common vector for credential theft and wallet compromise in cryptocurrency-related phishing campaigns. Infrastructure analysis reveals the domain was registered on May 16, 2026, through Dynadot Inc, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.62.18, a Cloudflare-hosted endpoint leveraging HTTP/3 and Cloudflare Browser Insights for traffic obfuscation. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. Detection metrics confirm elevated risk: 9 of 95 security vendors on VirusTotal flag the domain as malicious, while three independent blocklists (including cryptocurrency-specific threat feeds) have listed it. Additional trust scores, such as a 0/100 rating from Gridinsoft, further corroborate its malicious classification. As of the latest assessment, coin-volcano-casino.co has been taken offline, likely due to enforcement actions or infrastructure takedowns. However, the domain's registration remains active, posing a residual risk of reactivation. Users are advised to block all connections to 104.21.62.18 and monitor for newly registered domains under the same registrar. Cryptocurrency wallet holders should verify transaction histories for unauthorized activity, as phishing campaigns of this nature often target private keys and recovery phrases. Network administrators are recommended to update firewall rules to deny traffic to the identified IP and implement DNS-based blocking for the domain and its known aliases.