# chicken-game-casino-sverige.xyz — SUSPICIOUS

> Domain chicken-game-casino-sverige.xyz poses as a Swedish casino to harvest login details. VirusTotal shows 0/95 detections.

## Summary
PhishDestroy identifies the domain chicken-game-casino-sverige.xyz as a generic phishing lure currently active in the wild. The domain mimics a Swedish online casino to deceive users into entering sensitive credentials, likely targeting gamers or Swedish-speaking victims. No specific brand or drainer kit signature has been confirmed at this stage of analysis, but the site’s overtly fraudulent naming convention suggests opportunistic credential harvesting rather than a sophisticated brand impersonation campaign. The domain leverages a deceptive second-level string—‘chicken-game’—to evoke casual gaming while the top-level string—‘casino-sverige’—implies a localized Swedish service, creating a false sense of legitimacy and regional targeting.  

This domain was flagged by PhishDestroy on March 04, 2026, following its creation on March 03, 2026. Technical analysis reveals it resolves to IP address 188.114.97.3 via a Let’s Encrypt SSL certificate, indicating an attempt to appear trustworthy. VirusTotal currently returns 0/95 detections and the domain is not present on Google Safe Browsing. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for high-volume low-friction registrations that are frequently abused in phishing and scam operations. As of this report, the domain remains unblocked by major threat intelligence platforms, leaving end-users vulnerable to exposure.  

The campaign is classified as ACTIVE with a status of UNDER_INVESTIGATION. PhishDestroy has flagged the domain using unique seed e55b5c to enable future correlation across feeds. While the immediate risk is localized to users who access the site directly or via malvertising, the absence of detections and blocklist presence raises the likelihood of broader propagation through social media, gaming forums, or spoofed ads. Immediate user action includes avoiding the domain entirely, blocking 188.114.97.3 at the network perimeter, and reporting the site to local CERT teams and browser vendors. Organizations are advised to deploy DNS filtering rules targeting the domain and its resolving IP, and to monitor for credential leaks associated with Swedish gaming or casino-related usernames and passwords. Remaining risk is assessed as MEDIUM pending further telemetry and sinkholing efforts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-03 10:59:37
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/51131a1a-e04f-45fe-a4f2-fc571f14d5e9
- PhishDestroy: https://phishdestroy.io/domain/chicken-game-casino-sverige.xyz/
- LLM endpoint: https://phishdestroy.io/domain/chicken-game-casino-sverige.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chicken-game-casino-sverige.xyz/
Last updated: 2026-03-27