buenoscasinotop[.]com

The domain buenoscasinotop.com was registered through NiceNIC International Group Co., Limited on 2026-02-21 and resolves to the Cloudflare address 188.114.96.3, which is announced as belonging to AS13335 Cloudflare, Inc. in the United States. The site returns an HTTP 301 redirect and presents the page title “BuenosCasinoTop - Guía de Entretenimiento Responsable en Argentina”. Passive analysis identified the use of Tailwind CSS, Unpkg, jsDelivr, Cloudflare, AOS, and HTTP/3, and the TLS certificate is issued by Google Trust Services under the WE1 authority. The infrastructure is listed on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal reports three of ninety‑three scanning engines flagging the domain as malicious, reinforcing the suspicion raised by the “Crypto Gambling” scam classification linked to the Gambler Scam phishing kit. The domain’s Gridinsoft trust score is 0 out of 100, indicating a complete lack of trust.

The nameservers are dina.ns.cloudflare.com and guss.ns.cloudflare.com, confirming Cloudflare’s DNS service. Analysis indicates that the domain is being used to lure victims into a crypto‑based gambling fraud, consistent with the “Crypto Gambling” label. The presence of a phishing kit and the low trust score suggest that the site likely hosts credential‑stealing or payment‑redirect mechanisms, although the exact payload has not been observed. The 301 redirect behaviour may be employed to conceal the final malicious landing page or to forward traffic to a secondary host. The limited blocklist presence (one list) and the modest VirusTotal detection count imply that the indicator may still be under‑reported in some security products.

Defenders should add the IP 188.114.96.3 and the domain buenoscasinotop.com to deny‑list rules across firewalls, DNS filters, and endpoint protection platforms.