spielbank[.]cc

Analysis of spielbank.cc indicates a high-risk phishing domain targeting users of cryptocurrency-based gambling platforms. The domain was registered on February 18, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and is currently active with a 200 HTTP status. Infrastructure analysis reveals Cloudflare-hosted nameservers (gannon.ns.cloudflare.com, margot.ns.cloudflare.com) and resolution to IP 188.114.96.3, associated with AS13335 in the United States. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. The page title, 'Spielbank: Most Popular Online Crypto Casino Based on Blockchain,' suggests an attempt to impersonate a blockchain gambling service, though no specific brand imitation is confirmed. The domain is flagged by 13 of 91 security vendors on VirusTotal and appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Detected technologies include tracking tools (Twitter Ads, Facebook Pixel) and Cloudflare Browser Insights, which may be used to monitor victim interactions. A Gambler Scam phishing kit is identified as the underlying framework, aligning with the domain's purported crypto casino theme. While the exact content and functionality of the site remain unanalyzed, the combination of registration details, hosting infrastructure, and security vendor detections strongly supports classification as an active phishing threat. Defenders should block the domain at the network level and monitor for related indicators, including the resolved IP and associated nameservers. No legitimate gambling service is known to operate under this domain.