ggprom5k[.]com

The domain ggprom5k.com is a confirmed phishing site engaged in brand impersonation targeting the Camelot brand. It poses an elevated risk as a gambling scam, presenting itself as a casino platform to deceive users into depositing funds or sharing personal information. No crypto drainer kit was detected. The site is currently taken offline, but prior activity indicates it was actively used for fraudulent purposes.

Technical indicators confirm the malicious nature of ggprom5k.com. The domain was flagged by 3 of 95 VirusTotal security vendors, including CRDF, Fortinet, and Gridinsoft, which assigned a trust score of 0/100. It appears on one security blocklist, PhishDestroy, and was registered through MAT BAO CORPORATION on October 04, 2025. The domain resolves to the IP address 194.145.208.100, hosted in the Netherlands under AS200514 (KnownSRV Ltd.), with Cloudflare nameservers eugene.ns.cloudflare.com and faye.ns.cloudflare.com. No SSL certificate was issued, and the observed page title was 'Daddy Casino — Играй только в лучшие игры! Рекордные выигрыши вместе с нами!'. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with ggprom5k.com should take immediate safety steps. If financial or login credentials were entered, change all passwords and enable two-factor authentication on affected accounts. Monitor bank statements and transaction histories for unauthorized activity. Report the domain to local cybercrime authorities and platforms like Google Safe Browsing or PhishTank to aid in blocking future access. Victims of gambling scams should also consider contacting consumer protection agencies for further assistance.