gxmble-casino-france[.]com

The domain gxmble-casino-france.com is currently active and exhibits multiple indicators of a phishing operation targeting online casino users. The site was registered on April 28, 2026 through Fewmoretaps OU d/b/a Trustname.com and is hosted behind Cloudflare, resolving to IP 172.67.164.76, which is registered to Cloudflare, Inc. in Canada. The domain uses a Let’s Encrypt certificate (E7) and resolves via the Cloudflare nameservers kanye.ns.cloudflare.com and karina.ns.cloudflare.com, suggesting the operator is leveraging CDN services for anonymity. HTTP requests return a 200 status, and the page title "Gxmble Casino | 150 % jusqu'à 500 € + 50 tours gratuits" aligns with the advertised lure typical of gambling‑related phishing kits. Intelligence sources identify the site as employing the "Gambler Scam" phishing kit, and it is listed on at least one security blocklist and flagged by PhishDestroy. VirusTotal analysis shows 2 of 91 security vendors flag the domain, and Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. AlienVault OTX reports a single pulse referencing the domain, indicating limited but existing community awareness. While the exact content of the landing page has not been examined, the combination of recent registration, use of a known gambling phishing kit, low trust scores, and active blocklist listings substantiate a high‑risk classification. Defenders should block the domain at network perimeter, update DNS filtering policies, and monitor for any related indicators of compromise. Additional investigation of the site’s payloads and any credential‑harvesting forms is advised to fully characterize the threat vector.