gamdom[.]ie

The domain gamdom.ie was registered on 2026-03-11 and resolves to the IPv6 address 2606:4700:3031::6815:5999, hosted behind Cloudflare (AS13335) in the United States. The site presents the page title “Gamdom Casino – Where Real Money Online Gambling Stays Secure” and serves over HTTPS using a Google Trust Services / WE1 certificate, indicating a valid TLS chain. Analysis of the observed infrastructure shows the domain is associated with the publicly known “Gambler Scam” phishing kit and is listed in one AlienVault OTX pulse, confirming prior intelligence correlation. The domain is currently blocked by PhishDestroy, MetaMask, and SEAL, appears on three external blocklists, and has a Gridinsoft trust score of 0 / 100, reflecting a high confidence of malicious intent. VirusTotal reports a single vendor detection among 94 scanners, reinforcing the suspicion while indicating limited coverage. MX records point to route3.mx.cloudflare.net (priority 26) and an incomplete second entry, suggesting a minimal mail configuration possibly used for command‑and‑control or phishing outreach. Nameservers tiffany.ns.cloudflare.com and melnicoff.ns.cloudflare.com resolve to Cloudflare’s authoritative DNS, consistent with the hosting provider. The threat is classified as a high‑risk brand‑impersonation campaign targeting Ethereum users, leveraging a crypto‑scam narrative. Defenders should continue to block gamdom.ie at network perimeter, monitor DNS queries for the associated nameservers, and add the IPv6 address to threat‑intel feeds; further investigation of any traffic to the domain is recommended to identify potential victim interaction.