draw88[.]net

Analysis of draw88.net indicates an active credential phishing domain registered on May 2, 2024, through NameSilo, LLC. As of July 29, 2026, the domain remains operational with elevated risk classification due to detection by 19 of 91 security vendors on VirusTotal and inclusion on at least one security blocklist, specifically PhishDestroy. The domain's infrastructure shows no additional public indicators such as hosting provider, autonomous system number, or SSL certificate details at this time. No brand target or phishing kit has been confirmed in available intelligence, and the exact content or lure type remains unanalyzed.

Defenders should treat this domain as a potential credential harvesting endpoint and prioritize blocking or monitoring access. The registration age of over 14 months suggests persistence beyond typical short-lived phishing campaigns, though no evidence confirms prolonged malicious use.

Further investigation into associated IP addresses, subdomains, or redirect chains may reveal additional infrastructure links. Organizations are advised to review logs for connections to this domain and implement protective measures for users who may have interacted with it.