xgambler[.]com

The domain xgambler.com was registered on February 21, 2026 through GoDaddy.com, LLC. It resolves to the IP address 44.232.173.249, which belongs to the Amazon.com, Inc. network (AS16509) located in the United States. The authoritative name servers are ns1.atom.com and ns2.atom.com. A review of the HTTP response shows a 200 status code and an SSL certificate labeled R12, while the page title reported by the scanner is “XGambler.com for sale | Spaceship.com”. Infrastructure fingerprints indicate the presence of Node.js, Envoy, Express, HSTS and an Akamai edge delivery layer. Security telemetry places the domain on one blocklist and records a single positive detection out of ninety‑five vendors on VirusTotal, resulting in a Gridinsoft trust score of 0 out of 100. The domain is currently listed as blocked by PhishDestroy and is classified as a generic_phishing threat with a high risk rating. The scam type is identified as a gambling scam, consistent with the “for sale” page title that suggests an attempt to lure victims with gambling‑related offers. Observations are limited to the metadata provided; the actual page content, malicious payloads, or credential‑harvesting mechanisms have not been captured in the available data. Consequently, the exact technique used to deceive users, as well as any associated command‑and‑control infrastructure, remains uncertain. Defenders should add 44.232.173.249 and the domain xgambler.com to deny‑list rules across firewalls, DNS filters and endpoint protection suites. Continuous monitoring of the associated IP range within the Amazon AS16509 network is advised, as activity may shift to adjacent addresses. Given the low trust score and existing blocklist entry, threat‑intel feeds should be updated to reflect the high‑risk gambling scam classification, and any inbound traffic to the domain should be redirected to a sinkhole for further forensic analysis.