casino-richard1[.]com

casino-richard1.com was registered on April 28, 2026 and is currently pointing to the Cloudflare edge address 104.21.56.11 located in Canada. The domain is served with a Let’s Encrypt certificate (E8) and uses the Cloudflare nameservers alexia.ns.cloudflare.com and damien.ns.cloudflare.com. The registration record lists Fewmoretaps OU d/b/a Trustname.com as the registrant, a pattern commonly observed in recent credential‑collection campaigns.

Threat intelligence sources have flagged the domain. AlienVault OTX includes it in a single pulse, and PhishDestroy has added it to its blocklist. VirusTotal reports three detections out of ninety‑five scanners, and the Gridinsoft trust engine assigns a score of 0 out of 100, indicating a high likelihood of abuse. The HTTP response returns a 403 status, which often accompanies phishing landing pages that hide content behind access controls.

Public probing of the site yields limited visible content, preventing direct observation of the payload or the specific brand being spoofed. No malware samples or phishing templates have been publicly released, and the only concrete indicator of malicious intent is the combination of low trust scores, multiple detections, and its inclusion in a dedicated anti‑phishing blocklist. Consequently, the exact phishing vector—whether credential harvesting, payment diversion, or malicious download—is still uncertain.

Defenders should treat casino-richard1.com as hostile. Immediate actions include adding the domain and its resolving IP address to outbound and inbound deny lists, updating DNS filtering policies to block both the domain and its Cloudflare edge IP, and monitoring for any related C2 traffic. Continuous re‑evaluation is advised, as future content disclosures could reveal additional tactics, techniques, and procedures.