goldenstarcasino[.]co[.]com

Analysis of goldenstarcasino.co.com indicates a high-risk crypto gambling scam domain actively targeting users, particularly Australians, as evidenced by its page title 'Golden Star Casino Sign Up and Login - Gold Jackpots for Australians.' The domain was registered on August 16, 1997, through Moniker Online Services LLC, though its long registration history does not mitigate current malicious activity. Infrastructure analysis reveals hosting on a Netherlands-based IP (45.83.192.8) under AS56851, an autonomous system previously associated with abusive traffic. The site employs WordPress, Nicepage, MySQL, PHP, and LiteSpeed technologies, alongside Yoast SEO and jQuery, suggesting a structured but deceptive web presence. The domain is flagged by two of 91 security vendors on VirusTotal, with additional blocklisting by PhishDestroy, Polkadot, Enkrypt, and Codeesura, confirming its classification as a Gambler Scam phishing kit.

A 301 HTTP redirect further indicates an attempt to funnel users to malicious endpoints. The SSL certificate, issued by Let's Encrypt (R13), provides encryption but does not validate legitimacy. Nameservers (ns1.nic.co.com through ns4.nic.co.com) and the .co.com subdomain structure are consistent with domains used to evade detection or exploit trust in secondary TLDs. Defenders should treat this domain as confirmed malicious, given its presence on four security blocklists and the explicit crypto gambling scam classification.

The Gridinsoft trust score of 0/100 reinforces its high-risk status. While the exact content and user interaction flow remain unanalyzed, the combination of technical indicators, detection vendor flags, and known phishing kit usage justifies immediate blocking and reporting. No legitimate use case is apparent for this infrastructure.