slotstates[.]com

Analysis of slotstates.com, a domain created on October 05, 2025 and currently taken offline, indicates it has been used for a crypto‑related phishing campaign. The site resolves to the IP address 172.67.158.116, which belongs to Cloudflare, Inc. (AS13335) and is geographically located in the United States. No SSL certificate was observed for the domain, leaving the connection unencrypted and vulnerable to interception. The registrar listed for the domain is MAT BAO CORPORATION, and the authoritative nameservers are ED.NS.CLOUDFLARE.COM and KEYLA.NS.CLOUDFLARE.COM, confirming the use of Cloudflare’s DNS infrastructure.

The page title returned by the server, "Slotstates: Most Popular Online Crypto Casino Based on Blockchain," suggests the site was masquerading as a cryptocurrency casino, aligning with the classified scam type of a crypto scam. Threat intelligence sources attribute the campaign to the "Gambler Scam" phishing kit, a known package used to harvest credentials from users seeking online gambling services. The domain appears on a single security blocklist and has been flagged by PhishDestroy, indicating that at least one anti‑phishing organization has taken action to block access.

Reputation data from Gridinsoft assigns the domain a trust score of 1 out of 100, reflecting extreme malicious confidence. AlienVault OTX reports the domain in one threat‑intel pulse, providing additional corroboration of its malicious use. VirusTotal scans show that ten of ninety‑five security vendors flagged the domain as malicious, reinforcing the suspicion of malicious activity despite a majority of vendors not detecting it.

Uncertainty remains regarding the current activity of the site, as it is reported offline and no recent HTTP response was captured.