app-gamercoin[.]xyz

This domain, app-gamercoin.xyz, is flagged as an active cryptocurrency-related phishing threat. Registered on March 13, 2026, through Dynadot LLC, the domain currently resolves to the IP address 188.114.96.3, which is associated with Cloudflare infrastructure. The use of Cloudflare and HTTP/3 indicates an attempt to obscure hosting details and enhance delivery speed, common tactics in phishing operations to evade detection and improve user experience before malicious payloads are served. Analysis of available intelligence reveals that 14 out of 95 security vendors on VirusTotal have flagged this domain, while it appears on two security blocklists and is actively blocked by at least two threat intelligence feeds. AlienVault OTX records the domain in 23 threat intelligence pulses, suggesting it has been observed in multiple malicious campaigns. The domain’s Gridinsoft trust score of 0/100 further supports its classification as high-risk. The current page title, 'app-gamercoin.xyz | 504: Gateway time-out,' may indicate temporary downtime or a deliberate attempt to avoid scrutiny while maintaining infrastructure readiness. The exact nature of the phishing scheme remains unclear due to the lack of visible content at the time of analysis. However, the domain name suggests a focus on cryptocurrency users, potentially impersonating a gaming or token-related service to harvest credentials or distribute malware. Defenders should treat this domain as hostile and prioritize blocking it at the DNS or network level. Monitoring for changes in page content or SSL certificate updates may provide additional indicators of compromise. Given its recent registration and active status, organizations should also investigate any historical connections to this domain in logs or proxy data to identify potential prior exposure.