glaming[.]live

This domain, glaming.live, is flagged as a brand impersonation threat specializing in crypto casino fraud. Analysis indicates the site mimics legitimate blockchain-based gambling platforms, specifically targeting users of cryptocurrency casinos. The infrastructure employs the Gambler Scam phishing kit, designed to harvest credentials, payment details, and cryptocurrency wallet information from unsuspecting victims. The page title, 'Glaming: Most Popular Online Crypto Casino Based on Blockchain,' directly aligns with the impersonation of high-profile gambling brands to lend false legitimacy. Infrastructure analysis reveals multiple technical indicators of compromise. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.1.86, which has been linked to other fraudulent activities. Created on December 21, 2025, the domain has been detected by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of malicious recognition. It appears on one security blocklist and has a Gridinsoft trust score of 0/100, further confirming its fraudulent nature. Google Safe Browsing (GSB) has not yet listed the domain, suggesting it may have evaded some detection mechanisms. As of the latest assessment, glaming.live has been taken offline, likely in response to security vendor detections and blocklist inclusions. However, the elevated risk level persists due to the domain's recent creation and the use of a sophisticated phishing kit. Users who interacted with the site should assume credential or financial data exposure and take immediate action, including revoking access to linked cryptocurrency wallets, monitoring for unauthorized transactions, and updating passwords on any associated accounts. Organizations should update their security policies to block resolutions to the identified IP and registrar patterns to prevent future engagement with similar threats.