gg-bet[.]icu

This domain, gg-bet.icu, poses as a legitimate online crypto casino to deceive users into disclosing sensitive information or transferring cryptocurrency. The site mimics the branding and claims of a well-known gambling platform, presenting itself as a blockchain-based crypto casino. Victims may be lured into depositing funds, entering login credentials, or interacting with malicious smart contracts under the false pretense of secure gambling. The threat primarily targets users familiar with crypto transactions, exploiting trust in the impersonated brand to facilitate fraud or credential theft. Analysis indicates this domain is part of a coordinated phishing infrastructure. The domain was registered on December 17, 2025, through NameSilo, LLC, a registrar frequently used for low-reputation domains. VirusTotal reports 15 out of 95 security vendors flagging gg-bet.icu as malicious, a detection rate that suggests moderate confidence in its fraudulent nature. The domain resolves to IP address 172.67.171.7, hosted on Cloudflare’s network (AS13335), which is commonly used to obscure the true origin of malicious sites. Notably, the domain lacks an SSL certificate, further indicating its suspicious nature. It appears on one security blocklist and was previously blocked by PhishDestroy, reinforcing its classification as a phishing threat. Users who visited gg-bet.icu should take immediate action to mitigate potential risks. If any credentials were entered, change passwords for all associated accounts, particularly crypto wallets and email addresses. Monitor financial and crypto accounts for unauthorized transactions, and consider revoking access to any connected applications or smart contracts. Run a full antivirus scan on any device used to access the site to detect potential malware. Report the domain to relevant authorities or security organizations to aid in broader takedown efforts. Avoid interacting with similar sites that claim to offer crypto gambling services without verified legitimacy.