hoteljessica[.]com[.]co

This domain, hoteljessica.com.co, is actively impersonating the U888 gambling platform, as indicated by its page title 'U888 U88 ⭐️ Trang Chủ Uy Tín U888 .COM Sảnh UU88 Chính Thức 2026.' The domain was registered on June 20, 2026, and currently resolves to the IP address 188.114.97.3, hosted under AS7488 (CNServer LLC) in the United States. Analysis reveals a 301 HTTP redirect, suggesting the domain is being used as a gateway to another malicious or deceptive endpoint rather than hosting content directly. Infrastructure analysis shows the domain uses Cloudflare nameservers (dell.ns.cloudflare.com and milan.ns.cloudflare.com), a common tactic to obscure the true origin of malicious traffic. The SSL certificate is issued by Let's Encrypt (YR2), which, while not inherently malicious, is frequently exploited by threat actors due to its low-cost and automated issuance process. The domain appears on one security blocklist, and four out of ninety-five security vendors on VirusTotal flag it as malicious, aligning with its classification as a generic phishing threat. The Gridinsoft trust score of 0/100 further corroborates the domain's high-risk status. While the exact phishing kit or payload remains unconfirmed, the combination of a newly registered domain, Cloudflare obfuscation, and impersonation of a gambling platform strongly indicates an active credential harvesting or fraud campaign. Defenders should treat this domain as hostile and prioritize blocking both the domain and its resolving IP address (188.114.97.3) at the network perimeter. No legitimate association with the U888 brand has been identified, and the domain's registration through Spaceship, Inc., a registrar often leveraged for short-lived malicious domains, reinforces its suspicious nature. Continuous monitoring for related domains using similar naming conventions or infrastructure patterns is recommended.