adminka[.]gammonef[.]com

adminka.gammonef.com is currently listed as an active generic phishing site with a high risk rating. The domain resolves to 176.97.79.105, an address hosted in the Netherlands and associated with AS58061 Scalaxy B.V. The site returns an HTTP 302 redirect and presents the page title “Work | Panel”, a pattern often used to imitate legitimate administrative interfaces.

The domain was created on February 21, 2026 and was registered through the REGRU-RU registrar. DNS resolution is provided by Cloudflare, using the name servers eugene.ns.cloudflare.com and faye.ns.cloudflare.com. The server runs Nginx with a Bootstrap front‑end and presents a Let’s Encrypt (R13) TLS certificate, indicating that the operator has taken steps to secure the transport layer despite the malicious intent.

Threat intelligence shows that two out of ninety‑five VirusTotal scanners have flagged the domain, and Gridinsoft assigns it a trust score of 0 out of 100. The domain appears on one external blocklist and has been explicitly blocked by the PhishDestroy mitigation service. These signals, combined with the high risk classification, confirm that the infrastructure is being actively used for credential‑harvesting or similar phishing operations.

Defenders should treat traffic to adminka.gammonef.com as malicious. Immediate actions include adding the domain and its IP address to network deny lists, updating email gateway filters to block URLs containing the domain, and monitoring DNS queries for signs of internal compromise. Continuous observation of the associated Cloudflare name servers may reveal additional sub‑domains or payload hosts that share the same infrastructure. Incident response teams should also consider sinkholing the IP address, if permissible, to disrupt the phishing campaign and collect further evidence.