mellstroy-casino2[.]com

Analysis of mellstroy-casino2.com indicates this domain was operating as a fraudulent online gambling platform impersonating Google. The domain was registered on October 15, 2025, through NameSilo, LLC, and resolved to the IP address 38.180.69.5, hosted by Scalaxy B.V. in the Netherlands under AS58061. No SSL certificate was present, increasing the risk of unencrypted data transmission. The page title, written in Russian, explicitly promoted a casino service: 'Официальный сайт Меллстрой казино — играйте онлайн, VIP-программа и кешбэк,' which contradicts Google’s legitimate services and confirms the scam type as crypto gambling.

The domain appeared on one security blocklist (PhishDestroy) and was flagged in a single AlienVault OTX threat intelligence pulse, suggesting limited but confirmed detection by the security community. Gridinsoft assigned a trust score of 0 out of 100, reflecting high risk. VirusTotal records showed 11 of 95 security vendors marked the domain as malicious, providing additional validation of its fraudulent nature. Nameservers were hosted on dnsowl.com, a provider often associated with high-risk domains.

As of the report date, the domain has been taken offline, though its infrastructure remains a potential indicator of compromise. Defenders should treat this domain as a confirmed threat, particularly for users targeted by Russian-language gambling scams. The absence of SSL, combined with the hosting provider’s reputation and the domain’s presence on blocklists, reinforces the need for continued monitoring of related infrastructure. No evidence suggests this domain was part of a broader phishing kit, but its registration details and hosting align with patterns observed in crypto-gambling fraud operations.