playjoker-games[.]fun

The domain playjoker-games.fun was registered on 21 February 2026 and is currently taken offline. Infrastructure analysis shows the hostname resolves to the Cloudflare‑owned address 172.67.196.160, which is advertised as belonging to AS13335 in the United States. The site presented a minimal HTML page whose title field was observed as “Hello”. The SSL certificate associated with the host is identified as “WE1”, indicating a standard Cloudflare‑issued certificate without extended validation.

Threat intelligence categorises the activity as a crypto‑related phishing campaign; the domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. Reputation services provide mixed signals: Gridinsoft assigns a trust score of 0 / 100, while Scamadviser reports a score of 41 / 100. VirusTotal analysis shows that one out of ninety‑three scanned security vendors flagged the domain, confirming at least a single detection. No additional public blocklist references or Safe Browsing alerts are listed beyond the single blocklist entry.

The exact payload or credential‑harvesting mechanism has not been disclosed, and the page content beyond the title remains unverified. Defenders should continue to block the IP address 172.67.196.160 at the network perimeter, enforce DNS filtering for the domain, and monitor for any resurgence of the hostname. Given the low trust scores and the observed vendor detection, the domain should be treated as high‑risk for credential or cryptocurrency theft until further forensic evidence is obtained.