gizbogamez-link[.]top

Analysis as of July 22, 2026 indicates that the domain gizbogamez-link.top is actively hosting a crypto‑related scam that masquerades as Binance. The domain was registered on December 13, 2025 through NameSilo, LLC and resolves to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States). The HTTP response is a 301 redirect and the TLS certificate is issued by Google Trust Services under the WE1 name, confirming a valid HTTPS endpoint. Cloudflare services are observed, including Browser Insights and HTTP/3 support. VirusTotal has recorded two positive detections out of ninety‑five scanned engines, and the domain is listed on PhishDestroy as well as a single additional security blocklist.

Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious classification. The page title returned by the server reads “Официальный сайт Gizbo Casino : Гизбо Казино для онлайн игры”, suggesting a gambling‑oriented front end, and the infrastructure matches the known “Gambler Scam” kit used in crypto‑drainer campaigns. The risk rating is high and the campaign remains active. Defenders should block DNS resolution for gizbogamez-link.top at the network perimeter and add the IP 188.114.97.3 to any outbound filtering rules. Email security gateways should flag messages containing this domain or any URLs that resolve to the Cloudflare IP range associated with the domain.

Since the TLS certificate is legitimate, certificate pinning is not effective; instead, rely on reputation‑based controls and the observed detection counts. Continuous monitoring of VirusTotal, PhishDestroy, and other threat intel feeds is recommended to capture any future re‑hosting attempts. Organizations that use Binance services should educate users about unsolicited requests that reference the domain, emphasizing that Binance never uses a .top TLD.