m[.]bahiscasino-yeni[.]vip

This domain, m.bahiscasino-yeni.vip, was registered on December 03, 2025 through Dynadot LLC. The authoritative nameservers listed are a.dnshost.vip and b.dnshost.vip, and the domain resolves to the IP address 188.114.97.3, which is part of the Cloudflare network (ASN13335) located in the United States. No TLS certificate is presented; HTTP requests are served without encryption, which is consistent with the observed “Attention Required! | Cloudflare” page title returned when the site was queried. The lack of a valid certificate and the generic Cloudflare interstitial suggest the domain is either being protected by Cloudflare’s default challenge page or is offline behind a protection layer.

VirusTotal analysis shows that one out of ninety‑five scanning engines flagged the domain, indicating at least one vendor has identified malicious behavior. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service. Its current operational status is reported as offline, and it is categorized as a crypto‑gambling scam in the intelligence feed.

Given the combination of recent registration, use of a free‑hosting nameserver pair, placement behind Cloudflare without TLS, a detection by a security vendor, and classification as a crypto gambling phishing site, defenders should treat any traffic to m.bahiscasino-yeni.vip as potentially malicious. Recommendations include adding the domain to deny lists on perimeter firewalls, DNS filtering solutions, and endpoint protection policies, monitoring for any future re‑activation, and correlating any internal logs that show attempts to resolve or contact this host with known phishing or credential‑theft activity. Because the site is presently offline, active content cannot be inspected, so threat intelligence should be updated if the domain becomes reachable again.