gb-ks-games[.]com

This domain, gb-ks-games.com, is identified as a credential theft operation designed to harvest user login credentials through deceptive web forms. Analysis indicates the site mimics legitimate gaming or account management portals, employing social engineering tactics to trick victims into submitting sensitive information. No direct evidence of a crypto drainer kit or brand impersonation (e.g., major gaming platforms) was observed, but the infrastructure aligns with credential harvesting campaigns targeting online communities. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 5 of 95 security vendors on VirusTotal, appears on 1 security blocklist, and is registered through NAMECHEAP INC. It resolves to the IP address 172.67.146.185, a Cloudflare-protected endpoint, and was created on June 12, 2026, suggesting a recently deployed malicious asset. The domain is blocked by PhishDestroy and has a Gridinsoft trust score of 0/100. Additionally, it is referenced in 4 threat intelligence pulses on AlienVault OTX, and its SSL certificate is issued by Google Trust Services, a common feature in phishing infrastructure to appear legitimate. The domain is currently offline, likely due to takedown actions or voluntary suspension by the registrar. However, residual risk remains, as threat actors may re-deploy the infrastructure under a new domain or IP address. Users who interacted with the site should assume credential compromise and take immediate remediation steps, including password resets and monitoring for unauthorized account activity. Organizations are advised to block the domain and associated IP at the network level to prevent further exposure.