coinrush-casino[.]space

Analysis of coinrush-casino.space, observed on July 24, 2026, indicates that the domain is associated with a crypto‑focused phishing operation. The domain was registered through NameCheap, Inc. on September 13, 2025, and resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site employed the nameservers lila.ns.cloudflare.com and maxim.ns.cloudflare.com, both typical of Cloudflare‑hosted services. No SSL certificate was presented, meaning the connection was not encrypted, which is consistent with many low‑cost phishing kits.

The page title retrieved from the site, "Coinrush-casino: Most Popular Online Crypto Casino Based on Blockchain," aligns with the declared scam type of a crypto scam and matches the Gambler Scam phishing kit identified in the intelligence. Security‑vendor scans on VirusTotal reported that 11 out of 95 scanners flagged the domain, suggesting malicious behavior recognized by a subset of antivirus engines. Additional reputation data shows a Gridinsoft trust score of 0 out of 100 and inclusion on a single blocklist, specifically PhishDestroy, confirming that at least one anti‑phishing service has taken action against the domain. The current operational status is offline, which may be due to takedown efforts or temporary suspension by the hosting provider.

Uncertainty remains regarding the full extent of the phishing campaign, such as the number of victims or the presence of additional infrastructure, because only a single blocklist entry and limited vendor detections are documented. Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat‑intel feeds with the observed indicators, and monitor for any resurgence of the domain or related subdomains. Given the lack of TLS, low trust score, and confirmed phishing kit, the domain should be treated as high‑risk for credential harvesting and cryptocurrency fraud.