jackpotpirate[.]com

Analysis of jackpotpirate.com, created on February 21, 2026 and hosted on an IP address (192.145.232.241) owned by AS22611 InMotion Hosting, Inc. in the United States, indicates active malicious infrastructure. The site presents a valid HTTPS certificate issued by Let’s Encrypt (R13), which masks its illicit purpose but does not imply legitimacy. Technical fingerprints reveal a WordPress stack backed by MySQL and PHP, served by Apache HTTP Server, with client‑side libraries jQuery and jQuery Migrate. HTTP requests return a 200 OK status, confirming the server is responsive.

Domain registration was performed through GoDaddy.com, LLC, and the authoritative nameservers are ns1.inmotionhosting.com and ns2.inmotionhosting.com. Reputation services flag the domain as high‑risk: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist. Two of ninety‑three VirusTotal scanners have reported detections, reinforcing the suspicion of malicious activity. Independent threat‑intel feeds such as PhishDestroy have already blocked the domain.

The primary scam classification is a crypto‑gambling phishing campaign, suggesting that victims are lured into fraudulent gambling offers to exfiltrate cryptocurrency or personal credentials. While the exact phishing page content has not been disclosed, the convergence of a recent registration date, low trust metrics, active blocklisting, and confirmed detections provides strong evidence of an operational threat. Defenders should add 192.145.232.241 to network deny lists, enforce DNS filtering for jackpotpirate.com, monitor outbound traffic for requests to this host, and consider broader domain‑generation‑algorithm (DGA) patterns that may accompany the observed infrastructure. Continuous re‑scanning with multi‑engine services is advised to capture any evolving payloads or additional detections.