allinpalace[.]space

Analysis of the domain allinpalace.space, observed on July 23, 2026, indicates that it is being used for a cryptocurrency‑related scam targeting gamblers. The domain was registered on August 21, 2025 through NameSilo, LLC and resolves to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is present, meaning the site operates without transport encryption, a common characteristic of low‑cost phishing kits. The page title returned by the server reads "ALLINPALACE | Play at the best online casino based on Blockchain," aligning with the reported scam type of a crypto casino lure. The infrastructure uses Cloudflare nameservers maxine.ns.cloudflare.com and nick.ns.cloudflare.com, providing typical DDoS mitigation but also obscuring the true hosting origin.

Reputation data shows the domain appears on one security blocklist and has been flagged by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of credibility. VirusTotal analysis reports that 2 of 93 security vendors have flagged the domain, reinforcing the suspicion of malicious activity. The identified phishing kit is categorized as a Gambler Scam, which often harvests credentials or funds from users seeking online gambling services.

While the site is currently offline, the combination of a recent registration date, lack of TLS, low trust score, and detection by multiple reputable sources suggests a high likelihood of malicious intent. Defenders should block allinpalace.space at DNS and firewall layers, monitor traffic to the associated IP 188.114.96.3 for any residual connections, and consider adding the domain to internal threat‑intel feeds. Continuous observation of related Cloudflare‑hosted IP ranges is advised, as threat actors frequently reuse infrastructure.