coincasino[.]top

This domain, coincasino.top, was registered on 24 November 2025 through Gname.com Pte. Ltd. and is currently hosted behind Cloudflare (AS13335) with the IP address 172.67.206.93 located in the United States. The authoritative nameservers ashley.ns.cloudflare.com. and dimitris.ns.cloudflare.com. resolve to the same Cloudflare infrastructure, indicating that the attacker is leveraging Cloudflare’s CDN and protection services. The site presents an HTTP 521 response code, which typically denotes a web server that is down or refusing connections, and the only visible page title returned is “404 Not Found”.

The TLS certificate is issued by Google Trust Services under the WE1 label, confirming the use of a valid, publicly trusted certificate despite the malicious intent. Security telemetry shows that the domain is classified as a crypto‑gambling phishing operation. It is listed on one external blocklist and has been actively blocked by the PhishDestroy service. On VirusTotal, one out of ninety‑three scanning engines flagged the domain, reinforcing the suspicion of malicious activity. The Gridinsoft trust score is 0 out of 100, indicating a complete lack of trust.

No additional intelligence such as Safe Browsing or OTX entries was provided. Given the combination of a recent registration, Cloudflare‑based hosting, a valid SSL certificate, and the observed phishing classification, defenders should treat coincasino.top as a high‑risk indicator. Recommended mitigation steps include adding the domain to network‑level deny lists, configuring web proxy filters to block HTTP requests to the host, and ensuring endpoint protection solutions are updated to recognize the single VirusTotal detection. Continuous monitoring of the IP address 172.67.206.93 and the associated Cloudflare nameservers is advised, as the infrastructure may be reused for further malicious campaigns.