bestpokies[.]world

PhishDestroy flags bestpokies.world as an ACTIVE crypto drainer scam domain under investigation. The threat involves credential theft through a malicious gambling-themed lure targeting cryptocurrency users. bestpokies.world was registered on July 18, 2025, through Web Commerce Communications Limited dba WebNic.cc and resolves to IP 188.114.97.3. The domain operates without any VirusTotal detections (8/95 engines) and leverages a legitimate Google Trust Services SSL certificate to enhance credibility. No known blocklists currently flag this infrastructure, suggesting early-stage deployment. The absence of detections and use of a trusted certificate indicate an attempt to evade security controls during initial campaign propagation. Risk from this domain is active and escalating due to its crypto-themed deception and lack of detection coverage. Users interacting with this site risk wallet drainage through hidden drainer scripts embedded in the gambling interface. The domain’s fresh registration, unblocked status, and clean SSL issuance create a potent threat vector for unsuspecting cryptocurrency investors. Immediate action is required: block domain and IPs at network/firewall levels, disable access to gambling-related domains, and inspect wallet transactions for drainer activity. Users should avoid visiting bestpokies.world and report any suspicious wallet transfers to their security team. Configure endpoint protection to monitor for drainer-related behaviors and update threat intelligence feeds to include this domain.