tiltfury[.]today

The domain tiltfury.today was observed hosting a fraudulent crypto casino front‑end and is classified as a crypto scam. Technical analysis shows the domain resolves to the IP address 188.114.97.3, which belongs to the Cloudflare network (AS13335, United States). The site was protected by Cloudflare services, including Cloudflare Browser Insights, and used the authoritative nameservers guss.ns.cloudflare.com and opal.ns.cloudflare.com. No SSL certificate was presented, indicating the site operated over plain HTTP when it was active.

The page title returned by the server was "Tiltfury: Most Popular Online Crypto Casino Based on Blockchain," confirming the advertised service. The infrastructure was registered through NiceNIC International Group Co., Limited, and the domain has been taken offline as of the report date, July 23, 2026. Threat intelligence flags the site as employing the Gambler Scam phishing kit, a known template used to lure victims into cryptocurrency‑related fraud. VirusTotal analysis recorded 16 detections out of 93 scanned security vendors, reinforcing the malicious classification.

The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. While the site is currently inaccessible, the combination of the observed page title, the identified phishing kit, the lack of TLS, and the multi‑vendor detection count provides sufficient evidence for a high confidence malicious rating. Defenders should continue to block DNS resolution for tiltfury.today, monitor for any re‑hosting attempts on other IP ranges, and update intrusion detection signatures to include the observed Cloudflare nameserver pattern and the specific page title string. Additional scrutiny of traffic to the associated IP address is advisable, as Cloudflare may host other unrelated legitimate services, but the historical association with this fraudulent casino warrants heightened vigilance.