32slot2d[.]xyz

32slot2d.xyz was registered on 11 March 2026 through NameCheap, Inc. The domain resolves to the IP address 188.114.97.3, which is part of Cloudflare’s AS13335 network and appears to be located in the United States. The site presents a valid SSL certificate issued by Google Trust Services (WE1), which can give a false sense of legitimacy. Both authoritative DNS records point to jerome.ns.cloudflare.com and michelle.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure.

The landing page carries the title “SLOT2D - Situs Judi Slot Online Terbaik Dan Terpercaya Indonesia”, explicitly positioning the site as an online gambling portal. Analysis of the content matches the known pattern of gambling‑related phishing campaigns that lure victims with promises of free spins or bonus credits. The domain is currently classified as a generic phishing site with a specific gambling scam tag, and five out of ninety‑five VirusTotal scanners have flagged it as malicious.

Threat intelligence sources reinforce the malicious assessment. AlienVault OTX lists the domain in eight separate pulses, and the domain appears on a single public blocklist, where it is already blocked by the PhishDestroy service. Gridinsoft’s trust score is 0 out of 100, indicating a complete lack of trust. The HTTP response code is 200, confirming that the site is actively serving content.

Uncertainty remains regarding the exact payload delivered to end users, as the public snapshot does not reveal any downloaded binaries or credential‑stealing forms. Defenders should therefore treat any interaction with the site as high risk. Recommended mitigations include adding the domain to DNS‑based blocklists, configuring web proxies to block HTTP/HTTPS traffic to the host, and monitoring for any outbound connections to the IP 188.114.97.3. Incident response teams should also look for signs of credential harvesting related to online gambling accounts.