# cryptoboss233.top — SUSPICIOUS

> Domain cryptoboss233.top is active in cryptocurrency drainer phishing campaigns. Resolves to IP 188.114.96.3, with 0/95 VirusTotal detections.

## Summary
Domain cryptoboss233.top is currently under investigation for hosting a cryptocurrency drainer phishing campaign targeting users of CryptoBoss Casino. The site masquerades as an official casino platform, offering 'Best Slots and Casino Games' while likely deploying malicious wallet-draining scripts to steal cryptocurrency assets. This domain is part of a broader trend where threat actors impersonate legitimate crypto casinos to deceive victims into connecting their wallets or transferring funds.  

This domain resolves to IP address 188.114.96.3 and was registered through Spaceship, Inc. on April 04, 2026. The domain currently shows 0 detections out of 95 on VirusTotal, indicating it has evaded initial detection mechanisms. It is flagged by two security blocklists and is actively blocked by MetaMask and SEAL. The domain also utilizes a Let's Encrypt SSL certificate, adding a false sense of legitimacy to the phishing site.  

The domain remains active and under active threat investigation. Immediate response actions include continued monitoring and sharing of IOCs (Indicators of Compromise) with cybersecurity partners. While the current risk is under investigation, the absence of detections and active blocking by security tools highlights the need for heightened vigilance among users. Remaining risk includes potential expansion to other domains or campaigns leveraging similar tactics. Users are advised to avoid interacting with this domain and report any suspicious activity to relevant authorities.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Page title: CryptoBoss Casino online offical | Best Slots and Casino Games

## Domain Intelligence
- Registered: 2026-04-04 13:43:47
- Registrar: Spaceship, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/cryptoboss233.top
- PhishDestroy: https://phishdestroy.io/domain/cryptoboss233.top/
- LLM endpoint: https://phishdestroy.io/domain/cryptoboss233.top/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cryptoboss233.top/
Last updated: 2026-04-06