pragacasino[.]com

This domain is flagged as an elevated-risk brand impersonation threat specifically targeting Ethereum users through a fraudulent online casino facade. Analysis indicates the site mimics legitimate cryptocurrency platforms to deceive victims into connecting wallets or depositing funds, likely deploying crypto drainer scripts upon interaction. The infrastructure exhibits multiple red flags consistent with organized fraud operations, including the use of high-risk registrars and recent domain creation to evade detection. Infrastructure analysis reveals the domain pragacasino.com was registered on October 29, 2025, through Dominet (HK) Limited, a registrar frequently associated with malicious domains. It resolves to IP address 57.129.97.29, which has no established reputation for legitimate services. Detection metrics show 1 out of 95 security vendors on VirusTotal flagged the domain, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. The page title 'PRAGACASINO | Enter the world of sport and stakes!' further confirms the attempt to lure victims with gambling-themed social engineering. Mitigation requires immediate action from both end users and security teams. Ethereum users should verify domain authenticity before connecting wallets or entering credentials, particularly for sites offering gambling services. Security teams should implement DNS-level blocking for this domain and its associated IP, while monitoring for similar patterns: newly registered domains with gambling-related content, low detection rates but presence on blocklists, and registration through high-risk providers. Wallet providers should add this domain to their phishing filters and warn users attempting to interact with it. The domain's current offline status suggests takedown action, but threat actors may reappear under similar infrastructure; continuous monitoring of newly registered domains with comparable characteristics is recommended.