gexcybet[.]icu

This domain, gexcybet.icu, is identified as a brand impersonation threat specifically targeting Ethereum users. Analysis indicates the site masquerades as a legitimate cryptocurrency or betting platform, likely designed to deceive visitors into disclosing wallet credentials or transferring funds under false pretenses. The page title, 'GEXCYBET | Enter the world of sport and stakes!', suggests an attempt to blend gambling themes with crypto services, a common tactic to lure victims into fraudulent schemes. No direct evidence of a crypto drainer kit was observed, but the impersonation framework aligns with known phishing infrastructure used in cryptocurrency scams. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was registered on June 19, 2025, through Web Commerce Communications Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 57.129.97.29, which has no prior reputation for legitimate services. On VirusTotal, 4 out of 95 security vendors flagged the domain as malicious, while Gridinsoft assigned it a trust score of 0/100. The domain appears on one security blocklist and is actively blocked by PhishDestroy. No entries were found in Google Safe Browsing at the time of assessment, though this does not mitigate the elevated risk posed by the domain’s infrastructure and known associations. As of the latest verification, gexcybet.icu has been taken offline, reducing immediate exposure to potential victims. However, the domain’s registration remains active, and the infrastructure could be reactivated or repurposed for similar fraudulent activities. Users who may have interacted with the site are advised to monitor their cryptocurrency wallets for unauthorized transactions and revoke any connected permissions immediately. Organizations should update blocklists to include this domain and its associated IP to prevent future access. The elevated risk level persists due to the domain’s recent creation, low trust scores, and history of impersonation, warranting continued vigilance.