casino-nirvana[.]online

Analysis indicates that casino-nirvana.online was taken offline as of the reporting date (July 24, 2026). The domain resolves to 104.21.73.128, an address owned by Cloudflare (AS13335) located in the United States. The site was hosted on Cloudflare’s infrastructure, as reflected by the authoritative nameservers kate.ns.cloudflare.com and viddy.ns.cloudflare.com, and it did not present an SSL/TLS certificate, meaning HTTPS was not available. The page title retrieved during the brief crawl reads “Casino‑nirvana: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the classification of a crypto‑focused gambling scam. Intelligence feeds identify the site as employing the “Gambler Scam” phishing kit, and the threat type is recorded as a generic phishing campaign that targets cryptocurrency users.

Reputation services flag the domain as highly suspicious: Scamadviser assigns a trust score of 24 / 100, Gridinsoft reports 0 / 100, and the domain appears on at least one security blocklist. VirusTotal scans show four of ninety‑five anti‑malware vendors flagging the host, and AlienVault OTX includes the domain in one pulse. PhishDestroy has also blocked the domain. The registrar information points to RU‑CENTER, with the domain creation date of September 06 2025, indicating a relatively recent registration. Uncertainties remain regarding the exact content and credential‑harvesting mechanisms because the site is offline and no HTTP response body is available beyond the title.

No evidence of HTTPS, redirection behavior, or payload delivery has been captured. Defenders should therefore treat the domain as malicious and proactively block any network traffic to the host. Adding the IP address 104.21.73.128 to deny lists, updating URL filtering rules, and ingesting the associated OTX pulse and blocklist entries into security information and event management (SIEM) platforms are recommended.