gaming88bet-aamp[.]xyz

The domain gaming88bet-aamp.xyz is currently active and classified as a high‑risk crypto‑gambling phishing site. The page title returned by the server is "GAMING88BET : HALAMAN RESMI", and the HTTP response code is 308, indicating a permanent redirect that may be used to funnel victims to a malicious endpoint. DNS resolution points to 172.67.220.75, an IP owned by Cloudflare (AS13335) located in the United States, and the authoritative nameservers are ariadne.ns.cloudflare.com and ignacio.ns.cloudflare.com. The site presents a Google Trust Services / WE1 SSL certificate, confirming HTTPS usage, but the underlying infrastructure consists of Node.js, React, Next.js, AMP, HSTS, Webpack, and HTTP/3, all typical of modern web applications that can be quickly repurposed for fraudulent campaigns. The domain was registered on 11 November 2025 through NameCheap, Inc., and has a Gridinsoft trust score of 0 / 100, reflecting a strong negative reputation. VirusTotal analysis shows that 7 of 95 security vendors flagged the domain, and it appears on a single security blocklist, where it is already blocked by PhishDestroy. While the exact content of the site has not been examined, the combination of a deceptive page title, permanent redirect, recent registration, low trust score, and multiple vendor detections strongly suggests a phishing operation targeting users of crypto gambling platforms. Defenders should immediately block the domain at perimeter and endpoint layers, monitor DNS queries for the associated Cloudflare IP range, and consider adding the domain to internal blacklist feeds. Continuous re‑scanning of the site is recommended to capture any changes in payload or hosting that could affect detection.