dewaggovo[.]org

The domain dewaggovo.org has been confirmed as a phishing site targeting users through a fake esports betting platform. Analysis indicates the site impersonates legitimate gambling services under the guise of "DewaGG," claiming to be the "first in Indonesia" for esports wagering and odds. This infrastructure is designed to harvest user credentials, financial details, or deploy malicious payloads under the pretext of online betting. The domain is currently offline, but its prior activity warrants further scrutiny. Infrastructure analysis reveals the domain was registered through NAMECHEAP INC on April 30, 2026, an unusually future-dated creation that may indicate domain spoofing or registry manipulation. It resolved to the IP address 188.114.96.3 and was flagged by 3 of 95 security vendors on VirusTotal, with a trust score of 0/100 from Gridinsoft. The domain appeared on one security blocklist and was documented in a single AlienVault OTX threat intelligence pulse. Detected technologies include Cloudflare, Cloudflare Browser Insights, and HTTP/3, suggesting the use of content delivery networks to obfuscate hosting origins and evade detection. The risk level for this domain is assessed as elevated due to its targeted impersonation of a niche service (esports betting) and the use of evasive hosting practices. While the site is currently offline, organizations and users are advised to block the domain and associated IP address at the network level. Security teams should monitor for related domains registered under the same registrar or resolving to the same IP range. End users should verify the authenticity of any gambling or betting platform through official channels and avoid entering credentials on untrusted sites, particularly those promoted through unsolicited links or advertisements.