aviatorfiled[.]cc

Analysis of the domain aviatorfiled.cc indicates active involvement in a high-risk phishing campaign targeting users of online gambling platforms. Registered on March 6, 2026, through Global Domain Group LLC, the domain hosts a phishing kit classified as 'Gambler Scam,' as identified in technical intelligence sources. The page title, 'Aviatorfiled: Most Popular Online Crypto Casino Based on Blockchain,' suggests an attempt to impersonate a cryptocurrency-based gambling service, though no specific legitimate brand affiliation has been confirmed through available data. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3, with an SSL certificate issued by Let's Encrypt, a common practice among both legitimate and malicious sites to enable HTTPS connections. The domain is flagged in 22 threat intelligence pulses on AlienVault OTX and appears on four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. Detection engines on VirusTotal report 15 of 95 security vendors marking the domain as malicious, while Gridinsoft assigns a trust score of 0/100, further corroborating its high-risk classification. Technical indicators show the presence of tracking technologies, including Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights, which may be leveraged to monitor user interactions or facilitate further malicious activity. The domain remains active as of July 12, 2026, with no evidence of takedown or mitigation efforts. Defenders are advised to block the domain and its resolving IP at the network level, update endpoint protection signatures, and monitor for related indicators of compromise. Given the domain's persistence and integration with advertising and analytics tools, users should be alerted to the risks of interacting with untrusted gambling or cryptocurrency platforms.