greencasino[.]us

Analysis of greencasino.us indicates a crypto scam phishing domain targeting users with fraudulent online gambling services. The domain was registered on August 27, 2025, through NameCheap, Inc., and is currently offline. Infrastructure analysis reveals it resolves to IP 104.21.20.14, hosted on Cloudflare's network (AS13335). No SSL certificate is present, increasing the risk of unencrypted data interception.

The page title, 'Greencasino: Most Popular Online Crypto Casino Based on Blockchain,' suggests an attempt to lure victims with promises of blockchain-based gambling, aligning with the identified 'Gambler Scam' phishing kit. Detection data shows limited but actionable signals: four security vendors on VirusTotal flagged the domain, and it appears on one security blocklist, specifically PhishDestroy. Gridinsoft assigned a trust score of 1/100, further supporting its classification as malicious. Nameservers (aitana.ns.cloudflare.com and cory.ns.cloudflare.com) are consistent with Cloudflare's infrastructure, a common choice for both legitimate services and threat actors due to its privacy and proxy capabilities.

Defenders should treat this domain as high-risk for crypto-related fraud. While the site is currently offline, historical DNS and WHOIS records should be preserved for forensic analysis. Network-level blocking of the IP (104.21.20.14) and monitoring for re-registration or DNS changes are recommended. Given the domain's recent creation and alignment with known scam patterns, organizations should alert users to the risks of interacting with similar gambling-themed crypto sites, particularly those lacking SSL encryption or verifiable legitimacy.