g2[.]1kes[.]com

PhishDestroy identifies g2.1kes.com as an active crypto drainer scam site, currently impersonating G2A to deceive users into connecting their cryptocurrency wallets. The domain is classified under the generic phishing threat category and remains operational as of the latest analysis. Users interacting with this site risk unauthorized cryptocurrency transfers and credential theft. g2.1kes.com resolves to IP address 104.21.9.194 and was registered on April 13, 2026 through GoDaddy.com, LLC. The domain is flagged by 22 out of 95 VirusTotal security vendors and is currently blocked by two major blocklists, OpenPhish and PhishingArmy. Despite utilizing a Let's Encrypt SSL certificate, the site maintains a high-risk profile, with no legitimate affiliation to G2A or any recognized brand. The domain's recent creation date and active status suggest a rapidly deployed threat designed to exploit unsuspecting users. This domain remains active and poses an immediate threat to visitors. PhishDestroy strongly advises users to avoid interacting with g2.1kes.com and verify the safety of any suspicious domains through official verification tools. Users who have already visited the site should immediately revoke any connected wallet permissions and scan their devices for malware. For further protection, enable multi-factor authentication on all cryptocurrency accounts and use hardware wallets for transactions.