nft-casinocoin[.]com

This domain, nft-casinocoin.com, is flagged as an active crypto drainer phishing site targeting users through a gambling-themed scam. Registered on February 28, 2026, via NiceNIC International Group Co., Limited, the domain resolves to 172.67.152.131, hosted on Cloudflare infrastructure (AS13335) with nameservers doug.ns.cloudflare.com and pam.ns.cloudflare.com. Analysis indicates the use of the Gambler Scam phishing kit, a known toolset for crypto-related fraud. The site employs a 301 HTTP redirect, suggesting it may funnel victims to secondary malicious endpoints. Detected technologies include WordPress, MySQL, PHP, and Cloudflare services, alongside Yoast SEO and HSTS implementation, which may be leveraged to appear legitimate or evade detection. The domain is listed on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. A Let's Encrypt SSL certificate (serial E8) is present, providing encrypted connections to deceive users. The page title, 'CasinoCoin,' aligns with the reported scam type of crypto gambling fraud. While VirusTotal shows three security vendors flagging the domain, the absence of broader detections does not mitigate the confirmed malicious activity. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where cryptocurrency or gambling-related activity is prohibited or monitored. The use of Cloudflare infrastructure complicates IP-based blocking, necessitating reliance on domain-based mitigations. No evidence of takedown or deactivation has been observed as of July 12, 2026, and the site remains operational. Further monitoring is advised to track potential shifts in infrastructure or associated malicious campaigns.