bb80800[.]com

Analysis of the domain bb80800.com indicates active phishing infrastructure targeting users of the k8凯发娱乐 platform, as evidenced by the page title retrieved from initial scans. The domain was registered on March 4, 2026, through Spaceship, Inc., and currently resolves to IP address 172.67.211.112. Infrastructure analysis reveals the use of Cloudflare services, including Cloudflare Browser Insights and HTTP/3, alongside a SSL certificate issued by Google Trust Services, suggesting an attempt to appear legitimate while masking the true origin of the malicious content. Security vendors have flagged this domain with a detection rate of 14 out of 95 on available scans, and it appears on at least two security blocklists. Additionally, the domain has been referenced in 23 threat intelligence pulses, indicating its association with known malicious campaigns. The Gridinsoft trust score of 0/100 further corroborates the high-risk classification. Defenders should note that the domain remains active as of July 12, 2026, and is blocked by multiple security mechanisms, including PhishDestroy and BLP-Malware. While the exact content and tactics of the phishing page are not yet fully analyzed, the presence of the page title 'k8凯发娱乐' suggests an intent to deceive users into interacting with fraudulent content. The use of Cloudflare infrastructure complicates attribution and takedown efforts, requiring defenders to monitor for additional indicators of compromise linked to this IP or registrar. Organizations are advised to block the domain and its resolving IP at the network level and investigate any potential exposure or interaction from internal users. Further analysis of related infrastructure may reveal additional domains or IPs tied to this campaign.