easysp[.]in

Analysis of the domain easysp.in confirms its classification as a blockchain-based online casino scam, targeting users with fraudulent gambling offers. The domain was registered on May 14, 2025, through NameSilo, LLC, and resolves to the IP address 69.5.189.54, hosted under AS42624 (Global-Data System IT Corporation) in Switzerland. Infrastructure analysis reveals the use of nameservers ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserverhub.com, a pattern consistent with low-reputation hosting providers frequently leveraged for phishing and scam operations. The page title, 'EASYSP | Play at the best online casino based on Blockchain,' explicitly identifies the site as a crypto-centric gambling platform, aligning with the 'Gambler Scam' phishing kit classification.

No SSL certificate was detected, further reducing user protection and increasing the likelihood of credential interception or financial fraud. Detection metrics indicate limited but targeted blocking: the domain appears on one security blocklist, and PhishDestroy has flagged it as malicious. Gridinsoft and Scamadviser both assign a trust score of 1/100, reflecting near-universal consensus on its fraudulent nature. As of the report date, the domain has been taken offline, though historical resolution and registration data remain relevant for retrospective threat hunting.

Defenders should treat this domain as a confirmed scam asset, particularly in environments where blockchain or cryptocurrency-related lures are prohibited. The absence of SSL, combined with the use of a known phishing kit and low-reputation hosting, provides sufficient grounds for immediate blocking at the DNS or network layer. No additional detections were reported by VirusTotal at the time of analysis, though this does not imply safety given the domain's offline status and prior malicious classification.