# h2.farm777slot.com — SUSPICIOUS

> h2.farm777slot.com is a newly registered affiliate slot game domain pushing a generic phishing scam since Jan 28 2026.

## Summary
PhishDestroy identifies h2.farm777slot.com as an active generic phishing domain designed to mimic legitimate slot-game promotions and harvest user credentials. The domain shows no ties to a specific brand, suggesting it is a disposable affiliate kit leveraging the familiar ‘slot’ theme to lure victims into inputting account details or payment card data. The landing page likely prompts users to ‘login’ or ‘deposit’ under the guise of a bonus offer, a common drainer strategy observed in recent campaigns targeting gaming enthusiasts.  

This domain resolves to IP 18.245.31.61, is served over an Amazon-issued SSL certificate, and was registered on January 28, 2026 via Amazon Registrar, Inc. VirusTotal currently reports 0/95 detections and the domain is not yet flagged by Google Safe Browsing. At this time, the domain has not been widely listed on public blocklists, reflecting its fresh creation and the lag in threat-intel propagation. The technical stack appears to rely on Amazon infrastructure for hosting and TLS termination, which can evade some reputation filters due to Amazon’s trusted reputation.  

The domain remains active and under investigation, with status marked as active and risk level currently under_investigation. While the lack of detections and blocklist presence is notable given its recent registration, the absence of flags should not be interpreted as safety. PhishDestroy recommends immediate user avoidance and network-level blocking of h2.farm777slot.com and its associated IP. Organizations should also monitor DNS resolutions and SSL cert issuance by Amazon for similar patterns. The remaining risk is elevated due to the domain’s freshness, lack of historical scrutiny, and potential for rapid spread through gaming forums and social media ads. Users encountering this domain should report it to their security teams and refrain from interaction.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-28 09:06:50
- Registrar: Amazon Registrar, Inc.
- IP: 18.245.31.61

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/27b95275-84fd-4027-94ab-b9ed42fe9571
- PhishDestroy: https://phishdestroy.io/domain/h2.farm777slot.com/
- LLM endpoint: https://phishdestroy.io/domain/h2.farm777slot.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/h2.farm777slot.com/
Last updated: 2026-03-23