cazinose[.]com

The domain cazinose.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The site presented the title “Cazinose: Most Popular Online Crypto Casino Based on Blockchain”, indicating a crypto‑gaming theme. Infrastructure analysis shows the domain resolves to IP 104.21.51.9, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com.

No TLS certificate is deployed, and the site responded with HTTP 200, confirming an unencrypted web service. Reputation metrics are extremely poor: Gridinsoft assigned a trust score of 0/100, and the domain appears on one security blocklist. PhishDestroy has already blocked the domain, and three of ninety‑three VirusTotal scanners flagged it as malicious, consistent with its classification as a crypto‑focused phishing operation that uses the Gambler Scam kit. The site is currently offline, but the same infrastructure could be re‑used for future campaigns.

Uncertainty remains regarding the exact victim vector because the page content has not been captured, and no Safe Browsing or OTX entries are referenced. Defenders should add cazinose.com to internal blocklists, monitor Cloudflare‑originating traffic for similar patterns, and enforce TLS inspection to detect any future HTTP services from the same IP or nameservers. Network‑level filtering on the IP 104.21.51.9 and DNS denial for the listed nameservers will mitigate reuse. Continuous feeding of the observed indicators into threat‑intel platforms will improve detection of any re‑emergence.