testimdirky[.]top

The domain testimdirky.top was registered on 21 February 2026 and is presently taken offline. Infrastructure analysis shows it resolves to 172.67.182.164, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The TLS certificate presented is identified as WE1, indicating a standard Cloudflare‑issued certificate without any extended validation. The site’s page title, “TESTIMDIRKY | Play at the best online casino based on Blockchain”, together with the classification of the associated phishing kit as “Gambler Scam” and the overall scam type listed as “Crypto Scam”, point to a cryptocurrency‑focused gambling deception.

The domain is explicitly reported to impersonate the brand “foundation”. VirusTotal analysis recorded six detections out of ninety‑three scanned engines, and the domain appears on one external security blocklist. PhishDestroy has already added the domain to its blocklist, and the Gridinsoft trust score is 0 out of 100, reflecting a complete lack of trust. Despite the offline status, the combination of a recent registration, Cloudflare front‑end, brand‑impersonation claim, and multiple vendor detections suggests a high likelihood of malicious intent.

Uncertainty remains regarding the current hosting configuration and whether any active payloads remain accessible, as the site is not presently reachable. Defenders should continue to block the domain at network perimeters, monitor for any future DNS resolution changes, and include the IP address 172.67.182.164 in threat‑intel feeds. Additional scrutiny of outbound traffic to Cloudflare‑hosted addresses associated with recent registrations may help identify related campaigns. Ongoing observation of the “foundation” brand for similar impersonation attempts is recommended.