casinos-banzai-fr[.]com

This domain, casinos-banzai-fr.com, was part of a brand impersonation campaign targeting PayPal users. The site pretended to be a legitimate online casino called Banzai Casino, offering a 500€ bonus and 100 free spins, but its real purpose was to steal credentials and sensitive financial information from visitors who thought they were interacting with PayPal. The threat is classified as brand impersonation, a common tactic where cybercriminals misuse trusted brand names to trick people into handing over login details or payment data.

PhishDestroy identified the threat through multiple technical indicators. The domain was created on April 24, 2026, and registered through Fewmoretaps OU d/b/a Trustname.com. It resolved to IP address 188.114.96.3 and used an SSL certificate from Google Trust Services. VirusTotal flagged the domain with 2 out of 95 security vendors, indicating some detection but not widespread. AlienVault OTX found it in one threat intelligence pulse, and it appeared on one security blocklist. The page title explicitly included the PayPal brand, confirming the impersonation. The site is now offline, but the risk remains for anyone who may have visited it earlier.

If you visited casinos-banzai-fr.com and entered any personal information, especially PayPal credentials or financial details, take immediate action. Change your PayPal password and enable two-factor authentication. Monitor your accounts for unauthorized transactions and report any suspicious activity to PayPal's fraud department. Run a full antivirus scan on your device to check for malware. Stay cautious of similar offers that seem too good to be true, as they often hide malicious intent behind attractive bonuses.