Is this casino legit?

Enter a casino website and get the facts we can check from outside: domain age, HTTPS, the licence the site claims and where to verify it. Signals, not a verdict.

A domain or a full address. We read the public homepage once and look up the domain registration.

What each signal means and what to check yourself

a checkable positive · worth a closer look · unknown or neutral. There is deliberately no red.

In our casino profiles

Whether we have a sourced CashoutScore profile for this exact domain. If so you see the licence we recorded and whether we found it in the regulator register, with the link we used.

Check yourself: Open the profile and the regulator link. Our check has a date; licences change.

Domain age and registrar

The registration date and registrar from the public RDAP service (rdap.org, which forwards to the registry). Green from two years, yellow under six months, grey in between or when the registry does not publish dates (.io, for example, has no RDAP).

Check yourself: A young domain is not proof of a scam, but copycats of known casinos are usually weeks old. Make sure you typed the address of the casino you meant.

HTTPS and redirects

Whether the site answers over HTTPS with a certificate valid for the domain, and every redirect on the way to the final page. A redirect to a different domain is yellow.

Check yourself: If you end up on another domain, the licence certificate must cover that domain too.

Licence claimed by the site

Regulator names and licence numbers found in the homepage: Curaçao (OGL/2024/… numbers from the CGA, and old-style …/JAZ sub-licences), Anjouan (ALSI-…), Kahnawà:ke and Malta (MGA/B2C/…). Always grey: it is what the site says, not something we verified.

Check yourself: Open the regulator validator from the link we give (not from the casino) and match company, number and domain.

Seal link

Whether the page links to a regulator's own domain (cert.cga.cw, anjouangaming.com, gamingcommission.ca, mga.org.mt). Licence-looking links to any other domain are yellow: fake seals point to look-alikes.

Check yourself: Click the seal in your browser. A genuine certificate shows the status and a list of domains that includes the one you are on.

Terms and responsible gambling

Whether the homepage links to terms and conditions and to a responsible gambling or self-exclusion page.

Check yourself: Read the terms before depositing: operator company, licence, withdrawal limits, KYC triggers and the "irregular play" clause.

Could not read the site

Many casinos put a bot check (Cloudflare and similar) in front of the homepage, or build the page with JavaScript, which we do not run. Then we say so instead of guessing.

Check yourself: Do the same checks by hand: footer licence text, seal link, terms section 1. The licence guide shows where each regulator publishes its validator.

Next steps

How it works

Our server makes one request to the site's homepage (HTTPS first, plain HTTP only to report that HTTPS is broken), reads at most 1.5 MB of HTML without running JavaScript, and asks rdap.org for the domain registration. Each request times out after 8 seconds. Only public domain names are fetched: IP addresses, local names and anything that resolves to a private network are refused. Results are cached for ten minutes.

FAQ

Does a green result mean the casino is safe?

No. Green means a fact we could check points the right way, for example an old domain or a seal that links to the regulator. None of it tells you whether the casino pays withdrawals on time. That is what our withdrawal tests and payout monitor are for.

Why is there no red "scam" verdict?

Because nothing this tool can see proves fraud on its own. A new domain, a missing seal or an unreadable page all have innocent explanations. We show the signal, explain it and tell you how to check it yourself.

Why could you not read the site?

Many crypto casinos sit behind a bot check such as Cloudflare, or render their whole page with JavaScript. We make one plain request without running scripts and never solve challenges, so for those sites you have to look at the footer and terms yourself.

Do you verify the licence with the regulator?

Not live. We show what the site claims and link to the regulator validator so you can check it. For casinos we profile, we show the register check we did by hand, with its date and the link we used.

What do you store about my check?

Nothing tied to you. The result for a domain is cached for ten minutes so repeated checks do not hit the casino again, and a per-connection limit stops abuse.