buycrypto[.]gg

The domain buycrypto.gg has been identified as a phishing site involved in brand impersonation, specifically targeting the Ethereum cryptocurrency brand. This site posed an elevated risk to users by presenting itself as a legitimate cryptocurrency exchange platform. Currently, buycrypto.gg has been taken offline, reducing immediate risk to potential victims.

Technical analysis of buycrypto.gg reveals that it was flagged by 1 of 95 security vendors on VirusTotal, including Webroot. The domain was created on February 21, 2026, and resolves to the IP address 2606:4700:3033::6815:3919, located in the United States under AS13335 Cloudflare, Inc. The SSL certificate issuer is WE1. The site was listed on one security blocklist, PhishDestroy, and holds a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100. The page title observed was 'Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | BuyCrypto'.

For users who interacted with buycrypto.gg, it is recommended to take immediate safety steps. If cryptocurrency transactions were involved, users should revoke token approvals and move funds to a new wallet to prevent unauthorized access. Additionally, if credentials were entered, changing passwords and enabling two-factor authentication is advised to safeguard accounts. Users should remain vigilant for signs of fraud and report any suspicious activity to relevant authorities or platforms that manage security blocklists.