gravnbet[.]com

This domain, gravnbet.com, is flagged as an active brand impersonation threat targeting Ethereum users. Analysis indicates the site mimics legitimate cryptocurrency platforms, likely to facilitate fraudulent transactions or credential harvesting. The page title, 'GRAVNBET | Enter the world of sport and stakes!', suggests a gambling-themed lure, a common tactic to exploit users seeking financial opportunities in the crypto space. No evidence of a drainer kit was observed, but the domain’s infrastructure and impersonation tactics align with high-risk phishing campaigns designed to deceive victims into disclosing sensitive information or transferring assets. Infrastructure analysis reveals multiple technical indicators of compromise. The domain resolves to IP address 57.129.97.29, hosted on AS16276 (OVH SAS) in Germany, a provider frequently abused for malicious activities. It was registered on October 1, 2025, through NameSilo, LLC, a registrar often exploited by threat actors due to its low-cost and privacy-friendly registration options. VirusTotal reports 3 out of 95 security vendors detecting the domain as malicious, a low but notable detection rate that underscores its evasive nature. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Notably, the site lacks an SSL certificate, a red flag for any platform handling sensitive user data or financial transactions. As of the latest assessment, gravnbet.com remains active and unresolved, posing a continued risk to users. The absence of SSL encryption, combined with its recent registration and gambling-themed lure, heightens the likelihood of fraudulent activity. Users are advised to avoid interacting with the domain and to verify the authenticity of any cryptocurrency-related platform before engaging. Organizations should consider blocking the domain and its associated IP at the network level to prevent potential compromise. Given the domain’s high-risk classification and active status, ongoing monitoring and proactive threat intelligence sharing are recommended to mitigate further exposure.