dugamb[.]to

This domain is flagged as an active high-risk threat specializing in brand impersonation targeting the crypto gambling sector. Analysis indicates the domain, dugamb.to, mimics legitimate blockchain-based casino platforms, as evidenced by its page title, 'Dugamb: Most Popular Online Crypto Casino Based on Blockchain.' The intent is to deceive users into engaging with fraudulent gambling services, likely leading to financial theft or credential harvesting. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered through the Government of the Kingdom of Tonga on May 10, 2026, an unusual future date suggesting potential registration tampering or misconfiguration. It resolves to the IP address 104.21.37.15 and is hosted behind Cloudflare, a common tactic to obscure server origins. Detection metrics include 17 out of 95 security vendors flagging the domain on VirusTotal, while it appears on four distinct security blocklists. Trust scores from Scamadviser and Gridinsoft both rate the domain at 1 out of 100, reinforcing its high-risk classification. Additional telemetry from AlienVault OTX confirms its presence in at least one threat intelligence pulse, and it is actively blocked by multiple security frameworks. Mitigation against this threat requires a multi-layered approach tailored to crypto gambling impersonation. Users should verify domain registration details through WHOIS lookups, noting discrepancies such as the anomalous creation date. Network-level protections should block traffic to 104.21.37.15 and monitor for connections to domains registered via the Kingdom of Tonga registrar. Endpoint security solutions should enforce real-time blocking of domains flagged by at least 15 or more security vendors, as seen in this case. For organizations handling cryptocurrency transactions, implementing strict allowlisting for gambling-related domains and educating users on recognizing blockchain-themed phishing lures is critical. Suspicious domains should be reported to relevant threat intelligence platforms to improve collective defense.