gamacsj9472[.]space

Analysis of the domain gamacsj9472.space indicates a newly registered crypto‑gambling phishing site that was taken offline prior to the reporting date. The domain was created on 08 Oct 2025 and is registered through Atak Domain Bilgi Teknolojileri A.Ş., using Cloudflare nameservers eugene.ns.cloudflare.com and faye.ns.cloudflare.com. DNS resolution points to the IP address 172.67.183.142, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. No TLS certificate was observed, suggesting the site was served over plain HTTP when active.

The only page title captured is “Gama Casino”, matching the listed scam type of “Crypto Gambling” and the identified Gambler Scam phishing kit. VirusTotal scans show that two of ninety‑five antivirus engines flagged the domain, and it appears on a single external blocklist. The Gridinsoft trust score of 0 / 100 further underscores its malicious reputation. PhishDestroy has already blocked the domain, and the current status is offline, indicating that the site is no longer serving content at the time of analysis.

Defenders should continue to block the domain and its associated IP at perimeter defenses, add the IP to threat‑intel feeds, and monitor for re‑use of the Cloudflare‑hosted address in future campaigns. Because the site was hosted behind Cloudflare, any future activation could inherit the same infrastructural footprint while evading simple IP‑based blocking. Continuous re‑evaluation of the domain’s status and periodic rescans with VirusTotal or similar multi‑engine platforms are recommended to detect any re‑appearance. The combination of a fresh registration date, a zero trust score, detection by multiple vendors, and the use of a known gambling‑themed phishing kit justifies the elevated risk rating and warrants proactive containment.