bcgame-freespin[.]com

The domain bcgame-freespin.com has been identified as a credential-theft phishing site specifically targeting users of the BC.GAME platform. Analysis confirms the domain is currently offline, though prior activity impersonated the legitimate gaming service to harvest login credentials and personal information. The threat type is classified as a targeted phishing campaign with elevated risk due to its focus on a high-value user base. Infrastructure analysis reveals the domain was registered on February 28, 2025, through GANDI SAS and resolves to the IP address 3.161.82.98. Detection metrics indicate significant malicious activity, with 9 of 95 security vendors on VirusTotal flagging the domain as phishing-related. Additional indicators include a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 36/100, alongside its presence on one security blocklist. The site employed Amazon Web Services, Amazon S3, Amazon CloudFront, and Google Analytics, suggesting an attempt to mimic legitimate infrastructure while evading basic detection mechanisms. The SSL certificate was issued by Amazon, further aligning with common phishing tactics to appear authentic. Current status confirms the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to implement immediate remediation measures, including forced password resets for accounts potentially exposed to this campaign, and to monitor for unauthorized access attempts. Network-level blocking of the IP address 3.161.82.98 and domain bcgame-freespin.com is recommended to prevent future exposure. Security teams should review logs for connections to the domain or IP, particularly from endpoints associated with the BC.GAME user base, and update detection rules to include this campaign's indicators of compromise.