ianlee[.]me

Analysis of the domain ianlee.me confirms its classification as a high-risk brand impersonation scam targeting the online crypto casino and gambling sector. The domain, registered on January 19, 2017, through NameCheap, Inc., currently resolves to the IP address 104.21.21.162 and is actively serving content under the page title 'Ianlee: Most Popular Online Crypto Casino Based on Blockchain.' This title explicitly indicates an attempt to impersonate a legitimate crypto gambling platform, though the exact brand being mimicked remains unspecified in available intelligence. The domain is flagged by multiple security sources, including detection in 23 AlienVault OTX threat intelligence pulses and appearances on two security blocklists. Seven out of 95 security vendors on VirusTotal have marked the domain as malicious, reinforcing its classification as a confirmed threat. The domain is also blocked by at least two threat intelligence feeds, further validating its malicious nature. Infrastructure analysis reveals the use of Nginx and OpenResty web server technologies, alongside a Let's Encrypt SSL certificate, which provides a veneer of legitimacy while failing to mitigate the underlying threat. The domain is linked to the 'Gambler Scam' phishing kit, a known framework used to facilitate fraudulent gambling operations. Despite its long registration period, the domain's continued activity and consistent detection across threat intelligence platforms indicate it remains an active threat. Defenders should treat this domain as a confirmed brand impersonation scam, prioritizing its inclusion in blocklists and monitoring for any connections or redirects involving this infrastructure. The exact content and mechanics of the scam are not yet fully analyzed, but the available indicators strongly suggest it is designed to deceive users into engaging with fraudulent gambling services.