Spilfri Intelligence turns a gambling domain, operator or official blocking list into a structured investigation. It maps the domains, companies, licence signals, payments, technical infrastructure and providers around the case, then keeps watching for what appears next.
Evidence first. Jurisdiction aware. Website claims stay separate from regulator evidence, and weak shared infrastructure is never treated as proof of common ownership.
Retained scan, discovery, network and authority events appear here as they are written by the investigation system. A quiet feed means no new public event was retained; the connection indicator below still confirms live polling.
Operational activity in real time. Events are investigation signals, not automatic legal or regulatory conclusions.
Operators can change domains, mirrors, front ends and infrastructure. The useful question is not only “what should be blocked today?” but also “what sits around it, and what is likely to appear next?”
Use one suspicious domain, a known brand or operator, an authority-listed domain, or an existing enforcement/blocking list.
Review live and archived pages, resolve legal identities, check authority records, discover sibling domains, map technical relationships, retain payment signals and inspect observed provider infrastructure.
Freeze the known enforcement baseline, continue monitoring the wider case, and surface new evidence-backed domains for review without rebuilding the investigation from zero.
A blocking list becomes the starting point, not the end of the case.
The Danish Gambling Authority announced a court-approved block of 98 illegal gambling websites. Six 22Bet-family domains from that enforcement baseline are used here as the starting point.
The other 31 are investigation leads, not automatic blocking decisions. They can be reviewed before the next enforcement round starts.
Each layer answers a different question. The system keeps those layers separate so technical similarity, corporate identity and regulatory status do not get mixed into one unsupported conclusion.
Capture DNS, HTTP behaviour, redirects, TLS, page structure, gambling signals, country/currency cues and available first-party content.
Live capture can fall back to rendered-browser and public archive evidence when direct access is challenged or unavailable.Search outside the original list for brand-family domains, redirect targets, official alternates, first-party references and other evidence-backed candidates.
Weak search hits remain leads. They do not become network members just because a search engine returned them.Retain company names, registrations, addresses, operator roles and legal disclosures from captured public evidence.
Technical suppliers and shared infrastructure are deliberately kept out of operator attribution.Keep website licence claims as claims, then check the relevant jurisdiction using regulator-owned pages and retained authority data.
A company match is not displayed as an exact-domain match, and a licence for one regional hostname is not transferred to another.Store merchant descriptors, payment entities and related commercial signals when they are explicitly present in the evidence.
Provenance and verification state stay attached to the signal instead of turning an extracted phrase into a confirmed payment relationship.Compare DNS, IP, ASN, TLS, redirects, endpoints, tracking identifiers, page/application fingerprints and selected shared assets.
A shared CDN, registrar or common analytics service is weak context, not proof of common ownership.Connect domains to domains and entities using retained evidence, confidence, timestamps and the reason each edge exists.
The graph distinguishes investigated, connected, probable mirror, entity, candidate and monitoring-baseline context.Turn a known enforcement set into a living monitoring case. Freeze the baseline and surface later evidence-backed additions for review.
This is designed for repeated enforcement cycles rather than one-off static lists.Retain source URLs, captured material, observation times, confidence, relationship basis, authority checks and investigation history.
Structured reports can be generated from the retained case record for review and hand-off.Spilfri Intelligence can run a live rendered-browser capture and inspect the network traffic, retained endpoints, page content and bounded JavaScript sources that are visible from the front end.
In the current 22bet.ng demo capture, Sportradar / Betradar infrastructure is identified from directly observed technical endpoints with 99% technical attribution inside the case.
The system is built around a simple principle: discovery can be broad, but conclusions should get stronger only when the evidence gets stronger.
Start from a suspicious hostname, a brand, an operator or an authority's existing blocking/enforcement list.
Review direct pages, rendered content, archives, DNS/RDAP/TLS, legal disclosures and public authority sources.
Resolve brands, companies, operators, licence claims and jurisdiction relevance without transferring evidence across unrelated hostnames.
Search for mirrors, siblings, official alternates and other candidates, then keep weak leads separate from stronger network evidence.
Use regulator-owned sources to corroborate an exact domain, retained legal identity or licence reference where the jurisdiction supports it.
Compare entities, payment signals, technical infrastructure and observed providers across the retained corpus.
Freeze the known baseline and keep watching for evidence-backed domains that appear after the original action.
Review the sources, confidence, timestamps, graph edges and case history behind the result instead of receiving only a URL list.
This matters in regulatory work. A tool that finds more domains is only useful if an investigator can understand why a connection exists and how strong it really is.
Spilfri Intelligence is not limited to one workflow. The same domain graph can support regulatory, enforcement, financial and technical review from different angles.
Use existing blocking lists as seeds, check licence claims, map operators and mirrors, prepare review candidates and continue monitoring after a court or regulatory action.
Work from a domain into legal entities, historical material, technical infrastructure, related domains and an auditable chronology of what was observed when.
Review operator/company identities, payment entities, merchant descriptors and recurring commercial signals across domains where the evidence exposes them.
Inspect where browser-visible supplier technology appears in gambling investigations, while keeping technical use separate from ownership or contractual conclusions.
Work from regulator-approved domain decisions and continuously maintained case intelligence rather than treating a static list as permanently complete.
Use traceable public sources, company links, archived material and network context to understand a gambling brand or cluster beyond a single homepage.
The useful output is the retained reasoning around the domain: what was observed, what was inferred, what was verified and what still needs human review.
Gambling signals, ownership visibility, entities, licence claims, payment signals, infrastructure, captured pages and jurisdiction view.
Connected domains and entities with relationship type, confidence, evidence weight and the reason each connection exists.
Jurisdiction-scoped claims and regulator corroboration, with exact-domain evidence kept separate from company or licence-identity matches.
A frozen enforcement baseline, current case members, newly surfaced post-baseline candidates, actions and retained monitoring history.
Observed sportsbook/data/casino supplier signals, endpoints, browser traffic, infrastructure and fingerprints with explicit evidence boundaries.
Sources, timestamps, entity relationships, authority checks, network evidence and case history for review, discussion or hand-off.
Direct HTTP, rendered-browser capture, archives, public search, legal extraction and authority checks work together. AI can help resolve brands and structure public evidence, but the platform is designed to remain useful when an AI provider is unavailable and does not use AI as proof of regulatory status.
Send a gambling domain and I’ll run it through Spilfri Intelligence and send the results back. Regulators and organisations can also start with an existing blocking list.
The goal is not the biggest URL list. It is to make the next investigation faster, more explainable and less dependent on starting from zero.