coolzino-fr2[.]com

This domain, coolzino-fr2.com, is currently under investigation for operating as a fake online casino phishing site. Analysis indicates the site impersonates legitimate gambling platforms by offering fraudulent welcome bonuses in cash, a common tactic to lure victims into disclosing personal and financial information. The domain is presently offline, though its prior activity aligns with credential harvesting and financial fraud schemes targeting French-speaking users. Infrastructure analysis reveals several high-risk indicators. The domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with abusive registrations. It resolves to the IP address 188.114.97.3, which is part of a network known for hosting phishing and scam operations. Despite zero detections from 95 VirusTotal vendors, the domain appears on one security blocklist and has been flagged in a single threat intelligence pulse on AlienVault OTX. Additional technical indicators include the use of Cloudflare and Cloudflare Browser Insights, which may be leveraged to obfuscate malicious activity and evade detection. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy to unsuspecting visitors. Given the domain’s current offline status, the immediate threat to users is mitigated; however, the underlying infrastructure remains a concern. Organizations and individuals are advised to block access to coolzino-fr2.com at the network level and monitor for any re-emergence under the same or similar domains. Security teams should correlate this domain with other indicators of compromise, including the IP address 188.114.97.3 and the registrar Fewmoretaps OU. Users who may have interacted with the site should reset credentials for any accounts linked to it and enable multi-factor authentication where available. Proactive monitoring of related domains registered through the same registrar is recommended to preempt future threats.