betpandacasino[.]io

This domain, betpandacasino.io, is under investigation for operating as a crypto gambling scam. Registered on March 8, 2024, through NameSilo, LLC, it currently resolves to IP 172.66.175.171, hosted on Cloudflare's infrastructure (AS13335) in the US. The domain is flagged on one security blocklist and appears in a single AlienVault OTX threat intelligence pulse, indicating prior detection by the security community. The page title 'Nur einen Moment…' suggests a temporary or transitional state, which is often associated with phishing or scam infrastructure awaiting further configuration or redirection. The HTTP status returns 200, and the domain remains active as of the report date.

Analysis of the infrastructure reveals the use of Cloudflare nameservers (augustus.ns.cloudflare.com, magdalena.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which are common among both legitimate and malicious sites. Detected technologies include LiveChat, Google Tag Manager, and Google Analytics, which may be used for tracking user interactions or facilitating fraudulent activity. Gridinsoft assigns a trust score of 7/100, reflecting low confidence in the domain's legitimacy. While 93 vendors on VirusTotal currently report no detections, this absence does not confirm safety, as scam domains often evade initial detection.

Defenders should treat this domain as high-risk due to its presence on blocklists, low trust score, and association with crypto gambling scams. The use of Cloudflare hosting and legitimate-looking SSL certificates may complicate automated detection, necessitating manual review of network traffic and endpoint logs for connections to this domain. Monitoring for additional threat intelligence pulses or blocklist updates is recommended, as further evidence may emerge. If the domain is encountered in corporate or user environments, immediate blocking and investigation of associated activity are advised.