b-games[.]win

This domain, b-games.win, was identified as a credential harvesting phishing site designed to deceive users into submitting login credentials for gaming platforms. The site mimics legitimate gaming services, tricking visitors into entering sensitive account information, which is then captured by threat actors for unauthorized access or financial fraud. Such phishing infrastructure often targets gamers due to the high value of in-game assets and linked payment methods. Analysis indicates this domain was registered on June 12, 2026, through NAMECHEAP INC, a registrar frequently used for low-cost domain registrations associated with malicious activity. At the time of assessment, 5 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on one security blocklist. The domain resolved to the IP address 188.114.96.3 and utilized Cloudflare’s infrastructure, including HTTP/3, to obscure its origin and evade detection. The SSL certificate was issued by Google Trust Services, a common tactic to lend false legitimacy to phishing sites. AlienVault OTX recorded the domain in four threat intelligence pulses, further confirming its association with malicious campaigns. Users who visited b-games.win should assume their credentials may have been compromised. Immediate action is required: change passwords for any accounts entered on the site, enable multi-factor authentication where available, and monitor linked financial accounts for unauthorized transactions. If the same credentials were reused across multiple platforms, update those passwords as well. Organizations should block the domain and its associated IP (188.114.96.3) at the network level to prevent further access. Additionally, users should scan their devices for malware, as phishing sites often redirect to exploit kits or serve malicious downloads. Report the domain to relevant security teams or threat intelligence platforms to aid in broader mitigation efforts.