sfgamb[.]cc

This domain, sfgamb.cc, was registered on March 20, 2026, and is identified as a phishing site impersonating a blockchain-based online crypto casino. The page title, 'Sfgamb: Most Popular Online Crypto Casino Based on Blockchain,' explicitly indicates its fraudulent intent to deceive users into engaging with a gambling scam. Infrastructure analysis reveals the domain resolves to IP 104.21.11.219, hosted behind Cloudflare (AS13335, CA), utilizing Cloudflare nameservers (ridge.ns.cloudflare.com, serena.ns.cloudflare.com). The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. Detection data shows the domain is flagged by 6 of 94 security vendors on VirusTotal, with one security blocklist listing it.

The domain is classified under the 'Gambler Scam' phishing kit and is categorized as brand impersonation. Trust scores from Scamadviser and Gridinsoft both rate the domain at 1/100, further corroborating its malicious nature. The domain was taken offline following detection by PhishDestroy, though residual risk remains for users who may have interacted with it prior to its removal. Defenders should treat this domain as a confirmed phishing threat, particularly targeting individuals seeking cryptocurrency gambling platforms.

The use of Cloudflare infrastructure is consistent with threat actors leveraging CDN services to obscure hosting origins and evade takedowns. No evidence suggests this domain is associated with any legitimate brand, and its registration through NICENIC INTERNATIONAL GROUP CO., LIMITED aligns with patterns observed in other fraudulent domains. Organizations should block the domain, its resolved IP, and monitor for related infrastructure reuse. Further analysis of the 'Gambler Scam' kit may reveal additional indicators of compromise.