gamdom[.]us[.]org

This domain is flagged as an elevated-risk brand impersonation site specifically targeting Bitcoin-related users. Analysis indicates the infrastructure was designed to mimic legitimate cryptocurrency platforms, likely to harvest credentials or distribute fraudulent investment schemes. The domain’s association with cryptocurrency fraud aligns with its page title, which falsely advertises a "Top Bitcoin & Crypto Casino" with "6000+ Games." Infrastructure analysis reveals the domain gamdom.us.org was registered on June 08, 2026, through Key-Systems GmbH and resolves to the IP address 188.114.96.3. It appears on three security blocklists and is flagged by 2 out of 95 security vendors on VirusTotal. The domain is referenced in four AlienVault OTX threat intelligence pulses, indicating prior malicious activity. Protective measures by multiple security entities, including MetaMask and PhishDestroy, further confirm its classification as malicious. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. Mitigation steps for this threat type include blocking the domain and its associated IP at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to brand impersonation sites targeting cryptocurrency users. Security teams are advised to monitor for similar domains registered through Key-Systems GmbH or resolving to 188.114.96.3, as these may indicate related malicious infrastructure. Users should be educated on verifying domain authenticity before entering credentials or conducting cryptocurrency transactions, particularly when encountering unsolicited offers or casino-themed promotions.