julius-fr2[.]com

This domain, julius-fr2.com, is currently under investigation for operating as a fraudulent gambling platform impersonating Julius Casino France. Registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, the domain resolves to the IP address 188.114.97.3, hosted on Cloudflare infrastructure in Canada. The page title, 'Julius Casino France - Jeux et Slots Grisants,' explicitly targets French-speaking users with gambling-themed content, aligning with the identified 'Gambler Scam' phishing kit classification. Infrastructure analysis reveals Cloudflare nameservers (amos.ns.cloudflare.com, tegan.ns.cloudflare.com) and the use of Cloudflare Browser Insights and HTTP/3, which are consistent with modern phishing campaigns leveraging CDN services to obscure origin servers and evade detection. The domain appears on one security blocklist, specifically PhishDestroy, and has been assigned a trust score of 0/100 by Gridinsoft, indicating high suspicion. While VirusTotal scans from 91 vendors show no current detections, this absence does not confirm safety, as phishing domains often evade initial detection through rapid rotation or obfuscation techniques. The SSL certificate, issued by Google Trust Services (WE1), provides no additional assurance, as legitimate certificates are routinely abused in malicious campaigns. Defenders should treat this domain as active and high-risk, particularly for users in French-speaking regions. Network-level blocking of 188.114.97.3 and the domain itself is recommended until further analysis confirms its legitimacy or takedown. Given the domain's recent registration and use of Cloudflare, monitoring for related domains with similar naming conventions or infrastructure is advised. The exact content and functionality of the site remain unanalyzed, but the available indicators strongly suggest a fraudulent gambling operation targeting financial theft or credential harvesting.