jayaslot047[.]com

On 25 July 2026 analysts observed that the domain www.jayaslot047.com was taken offline but retains a set of indicators consistent with a crypto‑gambling phishing operation. The site was registered on 23 March 2026 through NameSilo, LLC and resolves to the IPv4 address 99.84.152.69, which belongs to Amazon Web Services and is served via CloudFront (global). The authoritative name servers are davina.ns.cloudflare.com, hugh.ns.cloudflare.com, ns-1047.awsdns-02.org and ns-1743.aw, confirming the use of both Cloudflare and AWS DNS infrastructure. No TLS certificate was presented, indicating that the site was delivered over HTTP only.

The page title captured during the brief crawl reads “Bergabunglah dalam Jaya Slot!”, matching the advertised crypto gambling theme. Detected server software includes Nginx and OpenResty, and client‑side libraries such as jQuery are present. Analytics scripts from Google Analytics and Baidu Analytics (百度统计) were also observed, suggesting attempts to track visitor behavior. The domain appears on a single security blocklist, PhishDestroy, and received a single positive detection out of 94 vendors on VirusTotal, reinforcing the suspicion of malicious intent.

Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating. The lack of an SSL certificate, the offline status, and the limited blocklist presence leave the current operational state uncertain; the site may have been removed by the hosting provider or the operators may be re‑deploying elsewhere. Defenders should continue to block the domain at perimeter defenses, monitor the associated IP address for any future activity, and add the observed nameservers to watch lists for potential re‑use. Because the infrastructure relies on widely used cloud services, future iterations may appear under different subdomains or IP ranges, so threat‑intel feeds should be updated with the full indicator set provided here.