Read the hostname before the promotion
A convincing logo and a working login form are easy to copy. The first useful check is the complete hostname in the address bar, followed by an independent link from the operator’s established documents or issuer record. Search ads, forwarded messages and social profiles are leads; none independently establishes that a deposit address belongs to the intended casino.
Do not open a suspicious link just to inspect it. Copy its text into a plain-text field or use the comparison tool below. The tool identifies structural differences only: it does not visit, scan or certify the site.
Three addresses that are not equivalent
| Address | Who controls the relevant domain? | Interpretation |
|---|---|---|
| https://login.example.com | The controller of example.com can normally delegate this subdomain. | A subdomain may be legitimate, but still needs confirmation for this product. |
| https://example.com.bonus-check.invalid | The controller of bonus-check.invalid | “example.com” on the left is part of a misleading subdomain, not the expected domain. |
| https://example-bonus.invalid | A different registered domain | Sharing a brand word does not establish an official relationship. |
Compare two hostnames
Which signs are useful, and which are weak?
HTTPS: an encrypted connection protects traffic to the domain you opened. It does not show that the domain belongs to the brand you meant to visit. A fraudulent lookalike can also have a valid certificate.
Registration data: ICANN’s RDAP guidance explains how to retrieve domain-registration information. A recent registration can help investigate a claimed ten-year history, but an old domain can change hands. Redacted registrant data is common and is not proof of fraud.
Licence seal: follow it to the issuing service and match the exact domain. A seal that opens another page on the suspicious site supplies no independent confirmation. The licence verification guide covers the record fields.
Urgent reward message: a demand to act immediately, disclose a login code or send funds before a prize is released warrants an independent check. CISA identifies urgency and implausibly attractive offers as common phishing tactics. Start a new session at the known site instead of replying through the message.
A wallet connection is not permission to spend
Connecting a wallet lets a site request interaction. A spending approval can allow a contract to use a token; a transfer sends an amount; a signature can authorise a separate action. Read the request shown by the wallet rather than relying on a website button labelled “verification”. If the consequences are unclear, decline and confirm the purpose through a trusted channel.
A normal deposit does not require your recovery phrase or private key. No support conversation or prize-release form should receive them. An explorer link can show a real transaction, but it still needs to match your asset, amount, recipient and network.
Choose the response for what you shared
| What happened | Action to take |
|---|---|
| Only opened the page | Close it, keep the address and report it through a known channel. |
| Entered a password | Change it at the real service and anywhere reused; review active sessions and enable available extra login protection. |
| Approved wallet spending | Inspect and revoke unwanted approvals using trusted wallet controls. Disconnecting the website alone may not revoke permission. |
| Sent funds | Save the transaction and recipient. Contact the receiving platform if identifiable and the relevant reporting service; do not pay someone promising guaranteed recovery. |
MetaMask’s token-approval guidance explains the difference between disconnecting a site and revoking permission. Use instructions for the wallet and network involved.
For a genuine service announcing a move, see casino domain changes. A renamed service needs account-continuity evidence, not an automatic fraud label.
Sources and dates
- MetaMask: token approvals — Disconnecting a website and revoking spending permission are different. Consulted 30 September 2026.