levelupcasino[.]co[.]com

This domain is flagged as a high‑risk brand‑impersonation campaign that targets Ethereum users. The fully qualified domain levelupcasino.co.com was created on 16 August 1997 and is currently registered through Moniker Online Services LLC. DNS resolution points to 104.21.65.231, an address owned by AS13335 Cloudflare, Inc., located in the United States, and the authoritative nameservers are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com. An HTTP request returns a 301 redirect and the page title observed is “Level Up Casino: LevelUp Casino Australia Login & Bonus”, indicating a gambling‑related lure that aligns with the Gambler Scam phishing kit.

Backend analysis reveals a WordPress stack with MySQL, PHP, Yoast SEO, jQuery, jQuery Migrate, and Cloudflare Browser Insights, while the SSL certificate is issued by Google Trust Services (WE1). The site is listed on four security blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—and receives a Gridinsoft trust score of 0 / 100, further confirming its malicious nature. VirusTotal records that 91 antivirus engines have scanned the domain with no detections, but the lack of signatures does not mitigate the observed indicators.

Defenders should block the domain at DNS and proxy layers, treat traffic to the associated IP as suspicious, and monitor for credential‑theft attempts against Ethereum‑related services. Correlate any internal alerts referencing the page title, the WordPress components, or the Cloudflare front‑end with this indicator, and continuously consult threat‑intel feeds for new listings. Given the active status and high risk rating, immediate remediation and ongoing monitoring are advised.