8617kryy[.]com

Analysis of 8617kryy.com shows that the domain was registered through NameCheap on December 12, 2025. The site resolved to the Cloudflare edge address 104.21.18.117, an IP located in the United States and announced as AS13335 Cloudflare, Inc. The TLS certificate presented the identifier WE1, indicating a standard Cloudflare‑issued certificate without extended validation. The only visible artifact on the live capture was the page title “12x | Crypto Only Casino”, which aligns with the classified scam type “Crypto Gambling”. The domain is associated with the publicly known “Gambler Scam” phishing kit, a template frequently used to lure victims into fraudulent cryptocurrency gambling services.

Defensive feeds have already flagged the domain: PhishDestroy listed it as blocked, a single external blocklist includes it, and the Gridinsoft trust score is 29 out of 100, reflecting low reputation. VirusTotal scans returned three detections out of ninety‑three scanners, confirming that multiple security engines consider the host malicious. The site is currently offline, which prevents further live inspection of its content or redirect behavior, leaving some operational details—such as form fields, credential capture mechanisms, or downstream command‑and‑control infrastructure—unverified.

Nevertheless, the combination of a recent registration, Cloudflare hosting, a gambling‑oriented page title, the Gambler Scam kit fingerprint, and multiple vendor detections provides sufficient confidence to classify 8617kryy.com as a crypto‑gambling phishing operation. Defenders should add the domain and its IP address to blocklists, monitor for any re‑registration attempts, and enforce URL filtering rules that target the “cryptoonlycasino” keyword pattern. Incident response teams encountering traffic to this host should treat any credential or wallet information submitted as compromised and advise affected users to revoke credentials and secure their crypto assets.