onecasino[.]cc

The domain onecasino.cc was registered on 5 October 2024 through NameCheap, Inc. and is currently resolved to the IP address 104.21.66.138, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is handled by the Cloudflare authoritative nameservers rudy.ns.cloudflare.com and saanvi.ns.cloudflare.com. No TLS certificate was observed for the host, indicating that the site was served over plain HTTP at the time of analysis. The page title returned by the server reads “Onecasino: Most Popular Online Crypto Casino Based on Blockchain”, matching the scam type categorized as a crypto‑based gambling fraud.

Threat intelligence flags associate the site with the publicly known “Gambler Scam” phishing kit. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, and the domain has been listed on at least one security blocklist. VirusTotal scans show that 15 of 95 scanning engines marked the domain as malicious, reinforcing the malicious classification. The domain is presently taken offline, as indicated by the “offline” status and confirmation that it has been blocked by the PhishDestroy sinkhole.

While the offline status reduces immediate exposure, the infrastructure—particularly the use of Cloudflare’s CDN and the lack of TLS—remains a reusable template for future campaigns. Defenders should continue to block the domain at perimeter firewalls, update URL filtering lists with the observed indicator set, and monitor the associated IP range for any re‑appearance of similar phishing kits. Additional vigilance is recommended for any newly registered domains that resolve to the same Cloudflare IPs and employ comparable page titles, as these may represent successor sites employing the same Gambler Scam infrastructure.