casinolodzpl[.]com

This domain, casinolodzpl.com, was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently hosted on Cloudflare infrastructure (AS13335) with the public address 188.114.96.3 located in the United States. The site serves a crypto‑gambling lure, as indicated by the page title “Casino Łódź Polska: Legalne Kasyno w Polsce” and the classification of the scam type as Crypto Gambling. Technical fingerprinting shows a WordPress stack backed by MySQL and PHP, with Yoast SEO, jQuery, jQuery Migrate, and Cloudflare Browser Insights present. The SSL certificate is issued by Google Trust Services under the WE1 label, and the HTTP response returns status code 200, indicating the web server is reachable.

Reputation data is limited but notable: two of ninety‑three VirusTotal scanners have flagged the domain, Gridinsoft assigns a trust score of zero out of one hundred, and the domain appears on a single security blocklist. It has been actively blocked by the PhishDestroy service. The phishing kit identified is the “Gambler Scam” kit, which is commonly used to impersonate online gambling platforms and solicit cryptocurrency payments. Nameservers ashley.ns.cloudflare.com and sonny.ns.cloudflare.com resolve to the same Cloudflare network, confirming the use of a CDN for traffic obfuscation.

Uncertainty remains around the current content of the landing page because no visual analysis was performed, and the extent of victim targeting is not disclosed. However, the combination of a recent registration date, low trust score, flagged detections, and the presence of a known gambling‑related phishing kit strongly suggests a high‑risk operation. Defensive teams should add casinolodzpl.com to URL filtering and DNS blocklists, monitor outbound connections to the associated IP address, and enforce strict controls on cryptocurrency transaction attempts originating from internal users.