happy-casino[.]live

The domain happy-casino.live is currently active and resolves to the Cloudflare‑hosted IP address 188.114.97.3, which maps to a US location under ASN 13335 (Cloudflare, Inc.). Its authoritative nameservers are arely.ns.cloudflare.com and carter.ns.cloudflare.com, indicating the infrastructure is fully provisioned through Cloudflare. The site presents a page titled "Your Online Casino Comparison Site in Canada" and is associated with a known "Gambler Scam" phishing kit that targets cryptocurrency gambling users. The threat classification is brand impersonation, specifically targeting the brand ankr, and the malicious content is categorized as a crypto gambling scam. The domain has been blocked by the PhishDestroy blocklist and appears on one additional security blocklist. VirusTotal analysis shows that 4 out of 95 scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. The site serves over HTTPS with a certificate issued by Google Trust Services (WE1) and employs Cloudflare and HTTP/3 technologies. A Gridinsoft trust score of 0 / 100 further indicates a high‑risk profile. Defenders should consider adding happy-casino.live to network and endpoint blocklists, monitor DNS queries for the associated Cloudflare nameservers, and enforce URL filtering for any references to ankr‑related services. Continuous observation of the IP address and any related subdomains is recommended, as the infrastructure may be leveraged for additional phishing campaigns.