mellcas[.]games

This domain is flagged for elevated-risk brand impersonation, specifically targeting crypto casino and gambling platforms. The threat involves mimicking legitimate gambling services to deceive users into engaging with fraudulent websites, potentially leading to financial loss or credential theft. Analysis indicates the domain was designed to exploit trust in established gambling brands, likely to facilitate scams or unauthorized transactions. Infrastructure analysis reveals the domain mellcas.games was registered on April 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 186.2.175.89 and is detected by 2 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist and is associated with a single threat intelligence pulse on AlienVault OTX. Additional technical indicators include the use of Vue.js and DDoS-Guard for hosting infrastructure. The page title, "Mellstroy — Official Online Casino," further confirms the intent to impersonate legitimate gambling services. Gridinsoft assigns a trust score of 0/100, reinforcing the domain's malicious classification. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP (186.2.175.89) at the network perimeter. Organizations should update security blocklists to include mellcas.games and monitor for any attempts to re-register or resolve the domain through alternate infrastructure. End-users should be educated on recognizing fraudulent gambling sites, particularly those using misspelled brand names or unofficial domains. Financial institutions and crypto platforms should implement transaction monitoring to detect and prevent fraudulent activity linked to this impersonation campaign.