ponzobet[.]com

This domain, ponzobet.com, is identified as a high-risk cryptocurrency phishing site. Analysis indicates it impersonates legitimate betting or crypto platforms to harvest wallet credentials, seed phrases, or private keys. No specific drainer kit has been conclusively linked, but the domain exhibits characteristics consistent with credential theft and asset diversion schemes targeting digital currency holders. The infrastructure appears designed to mimic trusted services, likely exploiting user trust in gambling or crypto-related brands to facilitate fraudulent transactions. Technical indicators confirm the domain's malicious intent. ponzobet.com is flagged by 14 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 1/100. Registered through Global Domain Group LLC on June 24, 2026, the domain resolves to IP address 172.67.133.96. It appears on two security blocklists and is associated with one threat intelligence pulse in AlienVault OTX. The SSL certificate is issued by Google Trust Services, a common tactic to lend superficial legitimacy. The domain is actively blocked by MetaMask and SEAL, further corroborating its phishing classification. As of the latest assessment, ponzobet.com remains active and poses a significant risk to users. Immediate response actions include blacklisting the domain across security platforms, revoking SSL certificates if feasible, and monitoring associated IP addresses for lateral movement. Users are advised to avoid interaction, verify wallet addresses independently, and report any suspicious activity to relevant security teams. Despite mitigation efforts, the domain's continued operation underscores the persistent threat of cryptocurrency phishing, necessitating heightened vigilance and proactive defense measures.