pokie-7-nodeposit[.]com

This domain, pokie-7-nodeposit.com, is flagged as an active generic phishing site targeting users with fraudulent no-deposit casino promotions. Infrastructure analysis indicates the domain is designed to impersonate legitimate online gambling platforms, luring victims with false bonus offers to harvest credentials or financial information. The domain remains under investigation for specific brand associations, though its thematic content suggests potential targeting of regional gambling operators. Analysis reveals the domain was registered on April 24, 2026, through Fewmoretaps OU d/b/a Trustname.com, an uncommon registrar in phishing campaigns. It resolves to IP address 104.21.58.210 and employs Cloudflare for hosting and DDoS protection, a common tactic to obscure origin infrastructure. Detected technologies include Strapi, Node.js, React, Next.js, and Express, indicating a modern JavaScript-based stack likely used to mimic legitimate casino platforms. The domain holds a Gridinsoft trust score of 0/100 and appears on 2 security blocklists, including PhishDestroy and OISD. Despite these red flags, VirusTotal reports 0 detections across 95 vendors, suggesting the campaign may still be evading widespread detection. The SSL certificate is issued by Let's Encrypt, a frequent choice for phishing sites due to its free and automated issuance process. Current status indicates the domain remains active and operational. Users are advised to treat any interaction with pokie-7-nodeposit.com as malicious. Network administrators should block the domain and its resolving IP (104.21.58.210) at the perimeter. Security teams are recommended to monitor for related infrastructure, particularly domains registered through Fewmoretaps OU or utilizing similar JavaScript frameworks. Given the domain's recent creation and low detection rates, heightened vigilance is warranted for potential expansion of this campaign.