fastbahisamp[.]icu

fastbahisamp.icu was registered on July 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IPv4 address 188.114.96.3 and uses Cloudflare name servers isla.ns.cloudflare.com and kyree.ns.cloudflare.com. As of July 20, 2026 the domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy feed. VirusTotal reports indicate that the domain was scanned by 91 antivirus and URL‑reputation engines, none of which raised a detection at the time of the scan. No public analysis of the site’s HTTP response, TLS certificate, page title, or content is available, so the exact phishing lure or targeted brand remains unconfirmed. The limited visibility suggests that the infrastructure may be newly deployed, with the registrar and hosting choices consistent with other short‑lived phishing operations that rely on Cloudflare’s CDN to obscure origin. Defenders should continue to monitor the domain for changes in classification, add the A record (188.114.96.3) to network‑level deny lists, and ensure that any outbound connections to the listed name servers are inspected. Because the domain is flagged by PhishDestroy and appears on a blocklist, security tools that ingest these feeds should treat any traffic to fastbahisamp.icu as malicious. Ongoing collection of HTTP headers, SSL details, and page content is recommended to refine detection rules and to identify the specific brand or credential‑stealing template employed.