frankcasinoca[.]com

This domain is flagged as a confirmed brand impersonation scam targeting crypto casino users. Analysis indicates a high-risk threat type involving financial fraud, credential harvesting, and unauthorized cryptocurrency transactions under the guise of legitimate gambling services. The site mimics established crypto casino brands to deceive victims into depositing funds or sharing sensitive account details. Infrastructure analysis reveals multiple technical indicators of fraudulent activity. The domain frankcasinoca.com resolves to IP address 158.94.211.126 and was registered through Spaceship, Inc. on May 13, 2026, an unusually future-dated registration suggestive of evasion tactics. It appears on three security blocklists, including MetaMask and PhishDestroy, while maintaining a VirusTotal detection score of 0/95 and a Gridinsoft trust score of 0/100. The site uses a Let's Encrypt SSL certificate, which, while encrypting traffic, does not validate legitimacy. AlienVault OTX records the domain in one threat intelligence pulse, further corroborating its malicious classification. Mitigation requires immediate action from both users and security teams. Network administrators should block the domain and its resolving IP at the perimeter to prevent access. Users who interacted with the site must revoke any connected crypto wallet permissions, rotate credentials for associated accounts, and monitor transaction histories for unauthorized activity. Financial institutions and crypto platforms should flag the domain in fraud detection systems to prevent fund transfers. Given the site's current offline status, continuous monitoring is advised to detect potential re-emergence under new infrastructure or domains.