wilcardcity-login[.]com

The domain wilcardcity-login.com is identified as a credential phishing site specifically targeting users of Wild Card City Casino, an Australian online gambling platform. Analysis indicates the domain was designed to mimic the legitimate login portal of the casino brand, harvesting user credentials under false pretenses. The domain is currently offline, though its prior activity remains a documented security concern. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. It resolved to the IP address 104.21.69.61, a Cloudflare-associated endpoint commonly used to obscure hosting origins. Detection metrics show the domain was flagged by 1 of 95 security vendors on VirusTotal, while Gridinsoft assigned it a trust score of 0/100. The domain appears on one security blocklist and was referenced in a single threat intelligence pulse on AlienVault OTX. The SSL certificate was issued by Let’s Encrypt, a legitimate provider often exploited by malicious actors to lend false legitimacy to phishing sites. At present, wilcardcity-login.com is offline, though its infrastructure and registration details suggest a deliberate attempt to deceive users. Security teams are advised to monitor for re-emergence under similar domains or IPs. Users who may have interacted with the site should immediately reset credentials for Wild Card City Casino and any reused passwords. Organizations should update blocklists to include this domain and its associated IP, while educating users on recognizing brand impersonation tactics in credential phishing campaigns.