ebett-gamess037[.]site

The domain ebett-gamess037.site was registered on June 12, 2026 through Namecheap Inc and is currently marked as active. Analysis classifies it as a generic phishing site. The only visible page returns the title "ebett-gamess037.site | 523: Origin is unreachable", indicating that the underlying web server is deliberately hidden or offline.

Technical probing shows the domain resolves to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. and geolocated to Canada. The authoritative nameservers are irma.ns.cloudflare.com and kaiser.ns.cloudflare.com. HTTPS is presented with a Google Trust Services / WE1 certificate, and the HTTP response is a 301 redirect. Traffic is served over HTTP/3, confirming the use of modern Cloudflare edge infrastructure.

Threat intelligence sources corroborate the phishing classification. AlienVault OTX lists the domain in four separate pulses, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal scans report four of ninety‑five security vendors flagging the domain as malicious, and the domain appears on one public blocklist. PhishDestroy has already blocked the domain.

While the surface‑level indicators are clear, the lack of a reachable payload limits detailed malware analysis. The 523 error suggests the origin server may be taken down after initial victim interaction, a tactic often used to evade forensic capture. No additional artifacts such as credential‑stealing forms or redirects have been observed in the current snapshot.

Defenders should immediately add ebett-gamess037.site to outbound filtering rules and blocklist entries. Continuous monitoring of DNS queries for the associated IP address and Cloudflare nameservers is advised, as the infrastructure could be reused for future campaigns. Updating detection signatures with the observed TLS fingerprint and HTTP/3 profile will improve early identification of similar abuse.