casinonova[.]cc

Analysis of casinonova.cc shows a newly registered domain (creation date February 21 2026) that was actively serving a crypto‑focused phishing campaign before being taken offline. The site was hosted on Cloudflare’s network (IP 104.21.66.139, AS13335, United States) and used the default Cloudflare nameservers galilea.ns.cloudflare.com and mcgrory.ns.cloudflare.com. No TLS certificate was presented, indicating the site operated without HTTPS protection. The page title observed during the brief live period was “Casinonova: Donald Trump’s Leading Blockchain Crypto Casino,” aligning with the classified scam type of a crypto scam and the identified Gambler Scam phishing kit.

Reputation services have flagged the domain heavily: PhishDestroy listed it as blocked, Gridinsoft assigned a trust score of 0 / 100, and it appears on one security blocklist. VirusTotal scans reported 16 detections out of 93 vendors, reinforcing the malicious assessment. Registration was performed through NiceNIC International Group Co., Limited, a registrar known to host abusive domains.

The current offline status limits immediate interaction, but the infrastructure footprint—Cloudflare edge IP, lack of SSL, and low trust scoring—remains reusable for future campaigns. Defenders should add the IP address 104.21.66.139 to network‑level deny lists, enforce DNS filtering for casinonova.cc, and monitor for any re‑registration attempts. Continuous threat‑intel feeds should be consulted for emerging indicators linked to the Gambler Scam kit, and endpoint protection policies must be updated to recognize the 16 VirusTotal detections associated with this domain.