LegitSpinPH · Private evidence library

The Hostname Check: A Character-by-Character Review

How to compare a website hostname with an official dated entry without mistaking subdomains, lookalikes or redirects for approval.

When someone asks whether a site is a “legit online casino,” the web address deserves its own check. Brand familiarity is not a hostname match. Nor does a matching hostname alone settle the operator, product scope or current status. The useful practice is to compare the complete address with a dated official record, then describe exactly what that comparison shows.

What counts as the hostname?

In a URL such as https://play.example.com/path, the hostname is play.example.com. The scheme (https) and the page path (/path) are separate. When a regulator’s list prints a domain, compare the host itself, preserving each label and suffix.

For example, these are different hostnames:

The second and third are subdomains of example.com, but they are still distinct complete hostnames. A list that prints www.example.com should not be paraphrased as though it necessarily printed the bare example.com. The point is not that one is automatically invalid; it is that the evidence must be described precisely.

Compare the published string, not just the brand

PAGCOR’s Electronic Gaming Licensing index provides separate dated lists for gaming system administrators and licensed casinos. The versions reviewed here are marked as of October 29, 2026; they were retrieved on November 11, 2026. The official GSA list includes multiple domains in some rows, while the casino list records licensed-casino brands and domains.

Write down four things before drawing a conclusion: the list title, its “as of” date, the operator’s legal name, and the exact brand/domain entry. Then compare the live address character by character. Do not replace a subdomain with its parent, treat a spelling variation as equivalent, or conclude that every page carrying a familiar logo belongs to the recorded operator.

A matching string is evidence of a match to that list entry. It is not a live check of a certificate, proof that the entry has remained unchanged since the list date, or approval of an affiliate website. Conversely, failure to find a requested string in the sources reviewed is a bounded research result—not proof that an entity does not exist, is illegal, or has been revoked.

Treat redirects as a separate question

A browser may move from one host to another. Capture the starting hostname and the final destination separately, including any intermediate redirect hosts if they matter to the review. A domain printed in a regulator list does not automatically validate every destination it points to, every subdomain, or a similarly branded page elsewhere.

This distinction matters even when the destination looks familiar. In the October 2026 list, the OKBet row includes entries such as www.okbet.com; that is a specific printed hostname. The source review therefore treats the exact chosen host and its redirect chain as items to confirm, rather than assuming every variant is covered by the brand name.

Likewise, the reviewed record lists certain BingoPlus domains under AB Leisure Exponent, Inc. for Traditional Bingo Games and separately lists BingoPlus Poker under Gamemaster Integrated, Inc. for Online Poker Games. The shared naming does not collapse the operators, products or their respective rows into one universal authorization.

Keep dates visible

The list snapshot is dated October 29, not November 11. Retrieval on November 11 tells us when the document was obtained; it does not change the date the document says it represents. A careful sentence might say: “The hostname appears in the PAGCOR list marked as of October 29, 2026, retrieved November 11, 2026.” It should not say “currently approved” unless current status was separately confirmed.

For a later decision, revisit PAGCOR’s Electronic Gaming Licensing index, review current advisories, and confirm the exact entity, product and address. PAGCOR’s security-seal verification page requests a serial code; a copied seal graphic or screenshot is not a completed verification.

One further boundary: a regulator’s operator/domain record does not itself settle advertising, publisher accreditation or trademark permission. The ASC’s June 2026 circular states a restriction concerning showing or mentioning casino games and equipment in gambling advertising. Whether a given information page falls within an advertising category calls for authoritative assessment, not guesswork based on its format.

A repeatable comparison workflow

A hostname comparison becomes more reliable when the reviewer keeps the original address visible throughout the process. Copy the complete address from the browser’s address bar, not from a logo, a search snippet, or a shortened link in a message. Separate the scheme and path from the host, then preserve the host exactly as shown. This guards against a familiar brand name distracting from a changed suffix, an extra word, or a different subdomain.

Next, open the official dated list and locate the relevant operator row. A brand match somewhere in a document is not enough if it belongs to another entity or product category. Compare the hostname with each printed entry as a literal string. Do not silently add or remove www, substitute one country-code suffix for another, or treat a spelling that looks close as identical. If the official record prints an entry without a scheme, do not infer that it specifically confirms a particular protocol.

Finally, state what the comparison establishes, and avoid changing a dated match into a claim of current approval.

A link can begin at one host and end at another. Record the starting address, the final address displayed by the browser, and any intermediate step that is relevant to understanding the route. A redirect is not automatically suspicious, but its existence makes it inaccurate to report only the first host as though it were the destination. Nor does a listed initial host automatically settle whether a later host is covered by the same record.

Treat links embedded in apps, QR codes, advertisements, or messaging posts with similar care. A QR code hides its destination until decoded; a short link can obscure the route; and a copied link may have changed since it was shared. Resolve the address as a research step without entering credentials or assuming that a familiar landing page proves the destination’s status. If the exact destination cannot be established safely or clearly, say that the redirect chain remains unresolved.

The October 2026 OKBet example illustrates why exact wording matters: the reviewed row prints www.okbet.com and other specific hostnames. It does not justify replacing those entries with every possible variation of the brand’s domain. The same principle applies to BingoPlus: separate ABLE and GII rows specify different offerings, so hostname evidence should be read together with the relevant operator and product, not in isolation.

Research note: This is a private research draft, not legal clearance or current verification of any site. The dated findings above reflect a snapshot retrieved November 11, 2026 and can change. Eligibility is not determined by age alone; 21+ is not sole eligibility. Gambling can be addictive. Know when to stop.