goodbet[.]click

This domain, goodbet.click, is a confirmed brand impersonation threat targeting users of crypto gambling platforms. Analysis indicates the site masqueraded as a legitimate blockchain-based casino, likely to harvest credentials, payment details, or cryptocurrency wallet information from victims. The page title, 'Goodbet: Most Popular Online Crypto Casino Based on Blockchain,' directly mimics marketing language used by established gambling services, increasing the likelihood of deception for users searching for such platforms. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on February 12, 2026, through Global Domain Group LLC, a registrar frequently associated with high-risk registrations. It resolved to the IP address 104.21.15.239, hosted on Cloudflare infrastructure (AS13335), which is commonly used to obfuscate the true origin of phishing sites. At the time of detection, 17 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on three independent security blocklists. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing domains routinely use valid certificates to appear legitimate. Users who visited goodbet.click should take immediate action to secure their accounts and assets. If credentials or wallet information were entered, revoke access to any linked services and transfer funds to a new, secure wallet. Monitor all associated accounts for unauthorized transactions or login attempts. Reset passwords for any platforms where the same credentials may have been reused, and enable multi-factor authentication where available. Given the domain's offline status, further direct interaction is unlikely, but users should remain vigilant for follow-up phishing attempts via email or social engineering. Report any suspicious activity to relevant financial or cryptocurrency platforms to assist in broader threat mitigation efforts.