ongamb[.]cc

This domain, ongamb.cc, was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently listed as taken offline. The site presented the page title “Ongamb: Elon Musk’s Official Crypto Casino Powered by Blockchain,” which aligns with a crypto‑scam narrative. Infrastructure analysis shows the domain resolves to the IPv6 address 2a06:98c1:3120::3, hosted on Cloudflare’s network (AS13335) in the United States. The web server stack consists of Nginx with OpenResty, and the TLS certificate is issued to Internet Widgits Pty Ltd. Both authoritative nameservers are ns1.nameserverhub.com and ns2.nameserverhub.com. Reputation services provide strong signals of malicious intent.

VirusTotal recorded 18 detections out of 93 scanning engines, and AlienVault OTX references the domain in a single threat‑intel pulse. The site is flagged by PhishDestroy and appears on one external security blocklist. Gridinsoft assigned a trust score of 1 / 100, indicating extreme risk. The phishing kit associated with the site has been catalogued as the “Gambler Scam,” a known template used to lure victims into fraudulent cryptocurrency gambling schemes.

While the domain is presently offline, defenders should assume the infrastructure remains under the control of the threat actor. Recommended actions include adding the domain and its IPv6 address to outbound and inbound blocklists, monitoring the associated nameservers for re‑activation, and enforcing TLS inspection to detect any future use of the same certificate. Continuous observation of Cloudflare‑hosted assets linked to the same ASN is advised, as the actor may migrate to new subdomains or IP ranges. Because the page title explicitly references Elon Musk, any communications purporting to be from Musk or related crypto services should be treated as suspicious when observed from this infrastructure.