playfortun[.]info

This domain, playfortun.info, is flagged as a crypto scam targeting users with a fraudulent online gambling platform. Registered on March 6, 2026, through NiceNIC International Group Co., Limited, the site was taken offline by July 24, 2026, but remains a documented threat. Infrastructure analysis reveals Cloudflare-hosted nameservers (magali.ns.cloudflare.com, yoxall.ns.cloudflare.com) and resolution to IP 188.114.96.3, part of AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious domains.

The page title, 'Playfortun: Most Popular Online Crypto Casino Based on Blockchain,' explicitly identifies the scam type as a crypto gambling fraud, aligning with the 'Gambler Scam' phishing kit classification. Detection data shows the domain appears on one security blocklist and is blocked by PhishDestroy. Seven of 94 security vendors on VirusTotal flagged the domain, though the absence of broader telemetry limits confidence in its full reach. The domain’s brief active period and rapid takedown suggest a disposable infrastructure pattern, common in phishing operations.

Defenders should treat this domain as part of a larger crypto scam campaign, particularly if linked to similar gambling-themed frauds. No evidence confirms persistence or lateral movement, but historical DNS and SSL records should be reviewed for related indicators. The exact content and user interaction mechanics remain unanalyzed due to the site’s offline status. Monitoring for re-registration or domain reuse under altered nameservers is recommended.