zusagamb[.]com

The domain zusagamb.com was registered on June 08, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and immediately pointed to Cloudflare’s IPv6 address 2a06:98c1:3120::3, an AS13335 Cloudflare, Inc. endpoint located in the United States. The site presented the page title "Zusagamb: Most Popular Online Crypto Casino Based on Blockchain," indicating a brand‑impersonation attempt that targets users interested in cryptocurrency gambling. The TLS certificate, issued by Google Trust Services under the WE1 profile, validates the HTTPS connection but does not guarantee legitimacy. Infrastructure analysis shows the domain is served behind Cloudflare’s network and uses the nameservers henrik.ns.cloudflare.com and thea.ns.cloudflare.com, a common configuration for fast‑flux or disposable phishing sites.

Security telemetry records 12 of 91 VirusTotal scanners flagging the domain, and three independent blocklists have listed it. It is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the assessment that the site is engaged in phishing activity. An HTTP response code of 666 was observed, which is non‑standard and often used by malicious operators to evade typical monitoring. The current operational status is offline, suggesting the site has been taken down or is temporarily unavailable.

Analysts should treat any URLs referencing zusagamb.com as malicious, especially those claiming to offer crypto casino services. Defensive measures include adding the domain to DNS blocklists, configuring web filters to deny traffic to the associated IP range, and monitoring for any resurgence of the domain or similar permutations. Because the site employed a legitimate‑looking SSL certificate and Cloudflare protection, reliance on certificate validation alone is insufficient. Continuous observation of the registrar and nameserver records is recommended to detect potential re‑registration or abuse of the same infrastructure.