selurin[.]com

Analysis of selurin.com, created on November 01, 2025 and currently taken offline, shows it was used for a crypto‑focused phishing campaign that mimics an online casino. The site presented the page title “Selurin: Most Popular Online Crypto Casino Based on Blockchain,” indicating a targeted lure toward cryptocurrency gamblers. Infrastructure traces reveal the domain resolves to 104.21.60.141, an address owned by Cloudflare, Inc. (AS13335) in the United States, and is served by the Cloudflare nameservers ajay.ns.cloudflare.com and meadow.ns.cloudflare.com. No TLS certificate was observed, meaning the site operated without HTTPS protection, a common trait of hastily deployed phishing kits.

Malware analysis links the page to the publicly known “Gambler Scam” phishing kit, reinforcing the gambling‑oriented lure. The domain was flagged by 12 of 95 security vendors on VirusTotal, indicating a moderate consensus of malicious behavior, and it appears on one external security blocklist. PhishDestroy has already blocked the domain, and the registrar listed is MAT BAO CORPORATION. A Gridinsoft trust score of 1 out of 100 further underscores the low credibility of the site.

Defenders should add selurin.com to DNS and URL filtering rules, block its resolving IP 104.21.60.141, and monitor other Cloudflare‑hosted assets that may share the same nameserver configuration. Given the absence of a valid SSL certificate and the confirmed use of a gambling‑themed phishing kit, any inbound traffic to this domain should be treated as highly suspicious, and related credential‑stealing attempts should be logged and investigated. Continuous threat‑intel feeds should be consulted for any re‑use of the same infrastructure, as the low trust score and recent creation date suggest the operators may redeploy similar domains in the future.