zk44[.]net

Analysis of zk44.net shows a newly registered gambling‑focused phishing infrastructure. The domain was created on February 21, 2026 through Dynadot LLC and is currently active. DNS resolution points to 188.114.96.3, an IP owned by Cloudflare, Inc. (AS13335) located in the United States. Nameservers jose.ns.cloudflare.com and lucy.ns.cloudflare.com confirm the use of Cloudflare’s DNS service. The site presents an HTTPS certificate issued by Google Trust Services under the WE1 name and enforces HSTS, while also supporting Cloudflare Browser Insights and HTTP/3. An HTTP 301 response indicates a permanent redirect, and the page title returned is "ZK44 — Premier Casino, Slots," matching the reported Gambler Scam kit. The domain is listed on one security blocklist and has been blocked by PhishDestroy. VirusTotal scans flagged the domain by four of ninety‑five vendors, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high‑risk classification. Defenders should immediately add zk44.net and its resolving IP to deny lists, monitor for any DNS changes, and ensure outbound traffic to Cloudflare edge nodes associated with this address is inspected. Continued observation of related indicators, such as the specific nameservers and certificate details, is advised to detect potential repurposing of the same infrastructure for additional campaigns.