bookofdeadpokies[.]com

This domain, bookofdeadpokies.com, is under investigation for credential theft targeting online casino users. Analysis indicates the site impersonates legitimate gaming platforms, specifically the 'Book of Dead' slot game, to deceive users into submitting login credentials, payment details, or personal information under the guise of free spins or demo access. The fraudulent infrastructure is designed to harvest sensitive data for subsequent unauthorized transactions or account takeovers. Infrastructure analysis reveals the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar with a history of hosting high-risk domains. It resolves to IP address 188.114.97.3 and employs Cloudflare for traffic obfuscation, alongside WordPress, MySQL, and PHP for backend operations. Despite its deceptive design, the domain has not yet been flagged by antivirus engines, with VirusTotal reporting 0/95 detections. However, it appears on one security blocklist and has been blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, providing a false sense of security to visitors. Users who visited bookofdeadpokies.com should immediately cease all interaction with the site and assume any submitted credentials are compromised. Reset passwords for associated accounts, particularly those linked to financial services or gaming platforms, using a unique, complex password for each. Monitor bank statements and transaction histories for unauthorized activity, and enable multi-factor authentication where available. If payment details were entered, contact financial institutions to report potential fraud and request card replacements. Security teams should update blocklists to include this domain and its resolving IP address, while monitoring for similar infrastructure patterns, such as newly registered domains mimicking gaming brands or using Cloudflare for evasion.