# casinofridayca.com — SUSPICIOUS

> casinofridayca.com is a brand impersonation domain using a crypto drainer. Flagged by 0 of 95 VirusTotal vendors. Suspected active credential theft campaign.

## Summary
PhishDestroy identifies casinofridayca.com as an active crypto drainer domain impersonating the CasinoFriday brand to harvest cryptocurrency wallet credentials and assets. The domain is currently under investigation but maintains an active status, indicating ongoing malicious operations.  

This domain was flagged by 0 of 95 VirusTotal vendors as of seed 063cfd. It resolves to IP 158.94.211.126, registered through Spaceship, Inc. on February 11, 2026. The domain employs a Let's Encrypt SSL certificate to appear legitimate. Current trust metrics reveal no third-party blocklist placements, contributing to its stealth profile. The combination of zero detections and a recently created domain suggests an emergent threat with low historical visibility.  

While the technical indicators remain under evaluation, the absence of antivirus detections does not equate to safety. This domain poses a medium-to-high risk due to its impersonation tactics and crypto targeting. Immediate action is required: block the domain casinofridayca.com at DNS and firewall levels, isolate any endpoints that accessed it, and inspect cryptocurrency wallet extensions for unauthorized permissions. Continue monitoring through threat intelligence feeds and conduct user awareness training on crypto wallet security practices to mitigate credential theft risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-11 10:53:08
- Registrar: Spaceship, Inc.
- IP: 158.94.211.126

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/casinofridayca.com
- PhishDestroy: https://phishdestroy.io/domain/casinofridayca.com/
- LLM endpoint: https://phishdestroy.io/domain/casinofridayca.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/casinofridayca.com/
Last updated: 2026-04-05