# roya.casino — SUSPICIOUS

> roya.casino is a crypto drainer phishing domain flagged by 1 of 95 VirusTotal scanners. Take immediate action to block this threat.

## Summary
PhishDestroy identifies roya.casino as an elevated-risk crypto drainer phishing domain (threat type: generic_phishing) actively targeting users.

This domain was flagged by PhishDestroy’s automated analysis pipeline with an elevated threat classification (generic_phishing, active status), resolving to IP 69.5.189.54. Domain metadata reveals it was created on August 11, 2025, and is registered via Spaceship, Inc. with a Let’s Encrypt SSL certificate. VirusTotal currently shows 1 of 95 security vendors flagging this domain. The domain remains active and unblocked by major threat intelligence feeds as of the latest scan.

roya.casino poses a high-risk threat to cryptocurrency users due to its crypto drainer design intent. Users accessing this domain may have credentials, wallet addresses, or private keys harvested via fake login forms or malicious JavaScript payloads. Immediate actions include blocking IP 69.5.189.54 at the network perimeter and disabling access to roya.casino in DNS and browser filters. Organizations should deploy browser-based anti-phishing extensions and conduct user awareness training on crypto wallet security. Users should verify URLs via official channels and avoid entering sensitive information on unknown crypto platforms. Monitor DNS logs for resolution attempts and block further IoCs if detected.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-11 23:25:45
- Registrar: Spaceship, Inc.
- IP: 69.5.189.54

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ae66b6bc-1733-4e8e-9837-7a3cefe72ae7
- PhishDestroy: https://phishdestroy.io/domain/roya.casino/
- LLM endpoint: https://phishdestroy.io/domain/roya.casino/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/roya.casino/
Last updated: 2026-03-22