daddyways190[.]site

The domain daddyways190.site was observed as an impersonation of the brand ankr and is classified as a crypto gambling scam. The site was created on October 03, 2025 and is currently listed as offline. Infrastructure analysis shows that the domain resolves to the IPv4 address 194.145.208.100, which is advertised as being located in the Netherlands and is advertised under ASN 200514 (KnownSRV Ltd.). The domain is delegated to the Cloudflare nameservers eugene.ns.cloudflare.com and faye.ns.cloudflare.com, but it does not present an SSL certificate, indicating that HTTPS is not enforced. Registration was performed through the registrar Atak Domain.

The public page title captured from the site reads “Daddy Casino — Играй только в лучшие игры! Рекордные выигрыши вместе с нами!”, reinforcing the gambling theme. Malware and phishing detection services have identified the domain: one of ninety‑five VirusTotal scanners flagged it, and it appears on a single security blocklist that is currently enforced by PhishDestroy. Additional reputation metrics are extremely low, with Gridinsoft assigning a trust score of 0 out of 100 and Scamadviser reporting a score of 1 out of 100.

The domain is also referenced in one AlienVault OTX pulse, confirming that it has been shared within threat‑intel communities. While the site is presently offline, the combination of a newly registered domain, low‑trust scores, absence of TLS, and the observed page title strongly suggests a targeted brand‑impersonation campaign leveraging a known "Gambler Scam" kit. Defenders should continue to block the associated IP address 194.145.208.100, monitor the Cloudflare nameservers for any re‑registration of the domain, and add the domain to internal blacklists. Network traffic to the identified IP should be inspected for any residual malicious activity, and any future DNS resolutions that point to the same IP or nameservers should be treated as high‑risk until further analysis confirms safety.