bcgame-coinbet[.]com

Analysis of the domain bcgame-coinbet.com indicates it was actively involved in a crypto gambling phishing campaign as of July 2026. The domain, registered on February 21, 2026, through Gandi SAS, resolved to the IP address 108.158.32.111, hosted on Amazon Web Services (AS16509) in Australia. Infrastructure analysis reveals the use of Amazon CloudFront and Amazon S3, alongside Google Analytics, suggesting a structured hosting environment likely intended to mimic legitimate gambling platforms. The page title 'BC.GAME Register' aligns with the reported scam type, targeting users of crypto gambling services.

Detection data shows the domain was flagged by 13 of 93 security vendors on VirusTotal, though the specific nature of these detections remains unconfirmed. It appeared on a single security blocklist, PhishDestroy, and received a trust score of 0/100 from Gridinsoft, reinforcing its classification as malicious. The SSL certificate, issued by Amazon RSA 2048 M02, does not provide additional legitimacy, as phishing domains frequently use valid certificates to evade basic security checks. Nameservers associated with the domain (ns-109.awsdns-13.com, ns-1332.awsdns-38.org, ns-1846.awsdns-38.co.uk, and ns-1510.awsdns-60.org) are consistent with AWS-hosted infrastructure, which is commonly exploited for phishing due to its scalability and low cost.

The domain is currently offline, but defenders should treat any reappearance or related infrastructure as high-risk. Organizations are advised to block the domain and IP at the perimeter, monitor for similar naming patterns (e.g., 'bcgame' or 'coinbet' variations), and review logs for connections to 108.158.32.111 or associated AWS ranges. Further investigation into the campaign's distribution methods (e.g., malvertising, social engineering) is recommended to mitigate broader exposure.