epicstar[.]cc

The domain epicstar.cc is currently active and hosted behind Cloudflare (AS13335) with the IP address 104.21.57.173 located in the United States. It was registered on May 03, 2026 by NICENIC INTERNATIONAL GROUP CO., LIMITED and serves an HTTPS page (Let's Encrypt / YE1) that returns HTTP 200. The page title "Epicstar: Most Popular Online Crypto Casino Based on Blockchain" indicates a brand impersonation scheme targeting cryptocurrency enthusiasts. VirusTotal reports 15 of 91 security vendors flagging the domain, and it is listed on three security blocklists, with explicit blocks from PhishDestroy, MetaMask, and SEAL. Infrastructure analysis shows the use of Cloudflare services, including Browser Insights, and tracking technologies such as Twitter Ads, Facebook Pixel, and Cloudflare. The domain’s Gridinsoft trust score is 1/100, reinforcing its malicious reputation. Nameservers are clay.ns.cloudflare.com and paislee.ns.cloudflare.com. While the exact phishing kit (Gambler Scam) is identified, the specific payload or credential collection mechanisms have not been publicly disclosed. Defenders should immediately block epicstar.cc at DNS and proxy layers, incorporate its IP and name server data into threat intelligence feeds, and monitor for any related C2 patterns or similar brand‑impersonation domains. Continuous re‑scanning with multi‑engine services is advised to capture any evolving indicators.