ksi-games-gb[.]click

This domain, ksi-games-gb.click, is classified as a high-risk phishing infrastructure based on current threat intelligence. Registered on June 12, 2026, through a registrar known for hosting malicious domains, the domain remains active as of July 12, 2026. It is blocked by at least two security providers and appears on two blocklists, indicating prior detection in phishing campaigns. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3, which is associated with Cloudflare services, a common tactic to obscure hosting origins and evade takedowns. The site employs HTTP/3 and a Let's Encrypt SSL certificate, further suggesting an attempt to appear legitimate while masking malicious intent. The page title, 'ksi-games-gb.click | 523: Origin is unreachable,' suggests either a misconfiguration or deliberate obfuscation of the backend infrastructure. While the domain is flagged by 8 of 95 security vendors in a recent scan, this detection rate alone does not confirm the specific phishing lure or target. AlienVault OTX records indicate the domain has been referenced in 16 threat intelligence pulses, reinforcing its association with malicious activity. However, the exact content or brand impersonation, if any, remains unconfirmed, as the domain has not been fully analyzed for visual or functional mimicry. Defenders should treat this domain as an active threat. Blocking the domain and its resolving IP at network and endpoint levels is recommended. Further investigation into associated infrastructure, such as co-hosted domains or linked IPs, may reveal additional compromised assets. Given the domain's recent registration and continued activity, monitoring for new indicators or shifts in hosting patterns is advised.