beastgamb[.]cc

Analysis of beastgamb.cc shows the domain was registered on March 12, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and points to the Cloudflare‑owned address 188.114.96.3 located in Canada. The domain resolves to that IP and uses Cloudflare’s default name servers jocelyn.ns.cloudflare.com and ridge.ns.cloudflare.com. No TLS certificate is presented, indicating the site was served over plain HTTP before being taken offline.

VirusTotal records five detections out of ninety‑four scanned scanners, and the domain appears on a single public blocklist that is also used by PhishDestroy, which has already listed the site as malicious. The current HTTP status is offline, and no further content such as page title or brand targeting has been disclosed. The limited evidence points to a generic phishing campaign, but the exact lure or credential‑stealing technique remains unknown.

Defenders should immediately block both the domain name and the associated IP address at perimeter firewalls and DNS filtering solutions. Because the infrastructure relies on Cloudflare, additional monitoring of other domains that resolve to the same IP may reveal related activity. Continuous re‑scanning of the domain on VirusTotal or similar platforms is advised in case the site reappears, and security teams should update threat intel feeds with the registration details and the observed detection count to improve early warning capabilities.