gamdom-play[.]com

The domain gamdom-play.com is a phishing site engaged in brand impersonation targeting cryptocurrency users. It mimics the legitimate platform 'across' to deceive victims into believing they are interacting with a trusted service, though no drainer kit was identified. As of the latest verification, gamdom-play.com has been taken offline, but it previously posed an elevated risk of financial scams.

Technical indicators confirm the malicious nature of gamdom-play.com. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through Internet Domain Service BS Corp. on November 03, 2025, it resolved to the IP address 104.21.15.220, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Gamdom Casino - Get a Welcome Bonus & Play at Gamdom Casino Online'. Gridinsoft assigned it a trust score of 0/100, and technologies detected included HSTS, Cloudflare, and HTTP/3.

Users who interacted with gamdom-play.com should take immediate safety steps. Since the scam involved cryptocurrency, victims should revoke any token approvals granted to suspicious contracts and transfer remaining funds to a new wallet. Monitor transaction histories for unauthorized activity. For credential or login-based phishing, change passwords on all affected accounts and enable two-factor authentication. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime units to aid in takedown efforts.