Cosmos Mirrors: How to Tell the Real Address From a Copy
Typing a password into the wrong page is the fastest way to lose an account. Gambling brands sometimes run several addresses at once, and that habit creates the perfect cover for phishing: if players expect the domain to change, a fake one does not look suspicious. This page explains what a mirror is, why copies are so common, how to confirm that an address is genuine before you sign in, and what to do if you think you have already used a fake page.
What a mirror actually is
A mirror is an alternative domain that serves the same site and connects to the same accounts as the main address. Operators set them up when the main domain becomes hard to reach — for technical reasons, because of network filtering in some countries, or to spread traffic. Your account, balance and settings do not live on a domain; they live on the operator's servers. That is why signing in through a genuine mirror shows the same account, and also why a fake domain only needs your login details to take it over.
Why fraudsters copy mirror addresses
A phishing copy imitates the site's design and waits for the password, the one-time code and, sometimes, identity documents. Copies are spread through search ads, social media comments, messaging groups and "working link" lists on forums. They often use domains that differ from the real one by a single letter, a swapped character, an extra word such as "login" or "official", or a different ending. Because the brand itself publishes alternative addresses, players are used to seeing new domains and lower their guard.
A checklist before you type a password
Start from a bookmark
Save the real address once and use that bookmark every time. Do not reach the site through links in messages, comments or ads.
Read the domain letter by letter
Look at the full address bar, not just the logo on the page. Watch for doubled or swapped letters, hyphens and unfamiliar endings.
Do not trust the padlock alone
A padlock means the connection is encrypted. Fake sites can obtain certificates too, so it proves nothing about who runs the page.
Be careful with search ads
Paid results at the top of a search can be bought by anyone, including fraudsters. Scroll past them or use your bookmark.
Never sign in from a message
A genuine operator does not need you to sign in from a link sent by chat, text or email to "confirm" anything.
Treat password plus code as an alarm
A page that asks for your password and a one-time code on the same screen, or asks for a code you did not request, is a classic takeover attempt.
Where a genuine alternative address comes from
If the main domain does not open, get the alternative only from sources the operator controls: the account itself, a notice on the real site you have bookmarked, or the operator's support reached through that site. Lists of "working links" on forums, chats and video descriptions are the main channel through which copies spread, even when the person sharing them means well. When in doubt, ask support to confirm an address in writing before you use it.
Mirrors and Ontario's regulated market
In Canada, gambling is regulated by the provinces. Sites in Ontario's regulated market are listed in the iGaming Ontario directory of regulated operators and display the iGO logo. The directory lists specific websites, so the domain matters: an alternative address of a site that is not in the directory does not become regulated because it has a new name. If the address you are using is not listed, BetGuard's centralized self-exclusion does not cover it and the AGCO is not your escalation route. That is worth knowing before you sign up, not after.
If you think you used a fake page
- Open the real site from your bookmark on a device you trust and change the password straight away.
- Change the same password anywhere else you used it, starting with the email account linked to the casino account.
- Switch on any extra login protection the account settings offer.
- Tell support what happened, when, and which address you used, and ask them to watch for unusual activity.
- If you uploaded identity documents to the fake page, ask the operator how to flag the account, and watch for unexpected messages or sign-in codes.
Keep screenshots of the fake page and its address; they help support and anyone else you report it to. Our support guide covers what a genuine agent will never ask for, and the mobile access guide explains how fake apps are distributed alongside fake domains.
Safety rules worth the extra minute
A few habits protect you better than any list of addresses: a unique password, an email account with its own strong password, any extra login protection the account offers, and a bookmark you use every time. If you are taking a break from gambling, a working alternative address is also a temptation; the self-exclusion guide explains how exclusion applies to the account rather than to one domain, and the responsible gambling page lists free help such as ConnexOntario at 1-866-531-2600. Read the terms of use of this site for how we handle links, or return to the home page.