onegamb[.]cc

Analysis of onegamb.cc, observed as offline at the time of assessment (July 23, 2026), indicates a high‑confidence crypto‑scam profile. The domain was registered on December 30, 2025 through NiceNIC International Group Co., Limited and resolves to the Cloudflare address 104.21.45.244, associated with AS13335 in the United States. Nameservers eloise.ns.cloudflare.com and julio.ns.cloudflare.com reinforce the use of Cloudflare's DNS infrastructure, a common choice for malicious operators seeking rapid deployment and DDoS protection. No TLS certificate was presented, meaning connections would be unencrypted, which aligns with the typical behavior of fraudulent cryptocurrency sites that avoid HTTPS to reduce cost and simplify hosting.

The page title returned by the server, “Onegamb: Elon Musk’s Official Crypto Casino Powered by Blockchain,” explicitly references a public figure and suggests a cryptocurrency gambling service, matching the “Crypto Scam” classification in the intelligence. The site is linked to the publicly known Gambler Scam phishing kit, further confirming the intent to lure victims into a fake casino environment. Detection services have raised alerts: sixteen out of ninety‑three VirusTotal scanners flagged the domain, and the Gridinsoft trust score is an extreme 1 / 100, indicating near‑certain malicious intent. The domain appears on one security blocklist and is actively blocked by the PhishDestroy service, providing additional evidence of its abusive nature.

Given the available evidence, defenders should treat onegamb.cc as a confirmed malicious entity. Recommended actions include adding the domain to local deny lists, ensuring that any outbound traffic to 104.21.45.244 is blocked, and monitoring for related indicators such as the associated Cloudflare nameservers and the Gambler Scam kit artifacts.