sambaslots-casino-france[.]com

This domain, sambaslots-casino-france.com, is flagged as an active high-risk phishing site impersonating an online casino platform. Registered on April 28, 2026, through Fewmoretaps OU (Trustname.com), the domain resolves to 172.67.138.83, a Cloudflare-hosted IP located in Canada. Analysis indicates the use of Cloudflare nameservers (gordon.ns.cloudflare.com and luciane.ns.cloudflare.com), a common tactic to obscure hosting infrastructure. The site returns an HTTP 200 status, suggesting it is operational, and employs a Let's Encrypt SSL certificate (E7), which does not validate legitimacy but provides encrypted connections to deceive users. The page title, 'Sambaslots Casino France – Machines à sous en ligne et casino rapide,' explicitly targets French-speaking users with gambling-themed content, aligning with the identified 'Gambler Scam' phishing kit. While the exact brand being impersonated is not confirmed in available data, the thematic focus on slot machines and online casinos is consistent with fraudulent gambling schemes. The domain appears on one security blocklist (PhishDestroy) and is referenced in a single threat intelligence pulse on AlienVault OTX, with a Gridinsoft trust score of 0/100, reinforcing its malicious classification. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in regions where French is prevalent. The use of Cloudflare infrastructure complicates takedown efforts, but monitoring for related subdomains or IP shifts may help identify further compromise attempts. No additional malware or payload delivery has been confirmed, but the domain's active status and phishing kit association warrant immediate containment actions.