1game[.]online

This domain, 1game.online, was registered on 28 February 2025 through NiceNIC International Group Co., Limited. The zone is served by four authoritative name servers (ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, ns4.nameserverhub.com) and resolves to the IPv4 address 69.5.189.57. The host resides in Switzerland and is announced by AS42624, which is owned by Global-Data System IT Corporation. The site presents a valid Let’s Encrypt certificate issued under the YR1 profile, allowing HTTPS connections with a HTTP 200 response code.

Threat intelligence shows that 3 of 95 security vendors on VirusTotal have flagged the domain, and it appears on at least one public phishing blocklist. The page title returned by the HTTP request is "1GAME | Play at the best online casino based on Blockchain", indicating a cryptocurrency‑focused gambling lure. The site is identified as using the Gambler Scam phishing kit, and both Scamadviser and Gridinsoft assign it a trust score of 1 out of 100, underscoring the malicious intent.

The current classification is generic_phishing with a high risk rating, and the domain remains active as of the report date. While the observed indicators confirm the presence of a cryptocurrency gambling scam, the exact payload delivered to victims (e.g., credential harvesting forms or malicious binaries) has not been captured in the available data, leaving the full attack chain uncertain.

Defenders should block DNS resolution for 1game.online and any sub‑domains, enforce outbound filtering for connections to 69.5.189.57, and monitor for traffic to the Let’s Encrypt‑secured endpoint. Continuous scanning of the associated IP range and the hosting ASN is advised, as is updating intrusion detection signatures to include the Gambler Scam kit patterns. Organizations should also educate users about unsolicited cryptocurrency casino offers that reference blockchain technology.