macan238d[.]com

Analysis as of July 25, 2026 indicates that www.macan238d.com was registered on March 23, 2026 through NameCheap, Inc. The site presented the title “MACAN238: Situs Link Judi Slot Online Gampang Maxwin Resmi Terpercaya,” suggesting a crypto gambling offering. DNS resolution points to the IP 188.114.97.3, which belongs to Cloudflare, Inc. with a location tag of CA. The domain is served over TLS using a certificate issued by Google Trust Services, and the hosting stack reports Cloudflare services, HTTP/3, LiveChat, jQuery, Facebook Pixel, and Cloudflare Browser Insights. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

Reputation scoring from Gridinsoft assigns a 0 / 100 trust score, indicating the highest risk. VirusTotal analysis shows that one out of ninety‑four scanning engines flagged the domain, reinforcing the suspicion of malicious intent. The registrar’s nameservers, anna.ns.cloudflare.com and martin.ns.cloudflare.com, are standard Cloudflare resolvers, which may complicate sink‑hole efforts if the domain is re‑activated. Current online status is offline, so active payload delivery cannot be confirmed at this time.

However, the presence of a gambling‑related page title, low trust score, blocklist entry, and a positive detection by at least one security vendor collectively point to a crypto‑gambling phishing operation. Defenders should continue to block the domain and the associated Cloudflare IP address at perimeter defenses, monitor for re‑registration or DNS changes, and incorporate the indicator set—domain name, IP, registrar, and TLS fingerprint—into threat‑intel feeds. Additional scrutiny of outbound traffic for connections to Cloudflare‑hosted IP ranges may help detect resurrection attempts, and security teams should update web‑filtering and email‑gateway rules to reflect this indicator.