gamefi198[.]com

PhishDestroy identifies gamefi198.com as an active crypto drainer phishing domain registered on October 08, 2025. This domain is not impersonating a specific brand but is engineered to deceive users into connecting cryptocurrency wallets or entering seed phrases under false pretenses, likely through fake gaming or financial incentive campaigns. The infrastructure is consistent with modern crypto drainer toolkits that intercept wallet transactions or harvest credentials via spoofed login portals. While no specific drainer kit signature is publicly available, the domain’s behavior aligns with documented campaigns targeting DeFi users.

This domain was flagged with 0 out of 95 VirusTotal detections as of the latest scan, indicating low detection coverage by antivirus engines despite its malicious intent. It was registered through Fewmoretaps OU d/b/a Trustname.com and resolves to IP address 174.35.120.229. The domain is protected by a Let’s Encrypt SSL certificate, which may enhance user trust while facilitating credential theft. It remains unlisted in Google Safe Browsing (GSB) and has not been widely blocklisted, presenting a high risk to unsuspecting users engaging with its content.

As of the latest assessment, gamefi198.com is classified as an active threat under investigation, with a risk level marked as 'under_investigation.' Immediate actions include blocking the domain at the network level, avoiding interaction, and reporting the domain to threat intelligence platforms and browser security vendors. Users are strongly advised to verify URLs manually, use hardware wallets for transactions, and never enter private keys or seed phrases on unverified websites. The current risk remains elevated due to low detection and the domain’s recent creation, highlighting the need for proactive monitoring and user vigilance.