gamdom-login[.]net

This domain, gamdom-login.net, is identified as a credential theft phishing site designed to harvest user login credentials for gaming platforms. Analysis indicates the domain impersonates legitimate gaming services, likely targeting users of the platform it mimics to gain unauthorized access to accounts. The page title 'Duel' suggests an attempt to lure victims into entering credentials under the guise of a game-related activity, increasing the likelihood of successful compromise. Infrastructure analysis reveals the domain was registered on April 24, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar with a history of hosting suspicious domains. The domain currently resolves to the IP address 188.114.97.3 and holds an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. Despite its recent creation, the domain has been flagged on one security blocklist and is assigned a trust score of 0/100. VirusTotal reports 0/95 detections, indicating it has not yet been widely flagged by security vendors, though this does not diminish its confirmed malicious intent. Users who visited gamdom-login.net and entered credentials are at high risk of account compromise. Immediate action is required: affected users should reset passwords for any accounts accessed via the site, enable multi-factor authentication where available, and monitor accounts for unauthorized activity. Additionally, users should review connected devices and sessions for signs of intrusion. Given the domain's offline status, further investigation into its infrastructure and associated threat actors is ongoing to determine the full scope of the campaign and prevent future incidents.