mellstroygames[.]casino

The domain mellstroygames.casino has been identified as a brand impersonation threat, specifically targeting the Telegram platform. This domain was designed to deceive users into believing it is associated with Telegram, but instead promotes a fraudulent online casino under the title "MELLSTROY онлайн казино." The threat type is classified as brand impersonation, not merely phishing, as it attempts to leverage the trust of the Telegram brand to lure victims.

Technical indicators reveal that mellstroygames.casino achieves a VirusTotal detection score of 11 out of 95 security vendors, indicating moderate awareness in the security community. The domain was registered through VDSINA (ASN: 48282) and resolves to IP address 89.110.90.118. It appears on one security blocklist and is found in one AlienVault OTX threat intelligence pulse. Notably, the domain lacks an SSL certificate, which is a common red flag for malicious sites. The domain is currently offline, suggesting that hosting or registrar intervention has taken place.

Given its offline status, the immediate risk is reduced, but the domain could potentially be reactivated or migrated to a new host. Users should remain cautious of any unsolicited communications referencing Telegram or similar brands and verify URLs before clicking. PhishDestroy recommends monitoring for any resurrection of this domain and ensuring that security controls block any future connections to it or its associated IP address.