gortev[.]com

Analysis of gortev.com indicates that the domain was registered on 21 February 2026 via NameSilo, LLC and points to the IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are lorna.ns.cloudflare.com and rajeev.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure. The site presented the title “Gortev: Most Popular Online Crypto Casino Based on Blockchain,” suggesting a fraudulent cryptocurrency casino front. No TLS certificate was observed, meaning the site served HTTP without encryption, a common characteristic of low‑effort scam deployments.

The page is associated with the publicly‑available “Gambler Scam” phishing kit, reinforcing the hypothesis that the operator is leveraging a pre‑built template to lure victims into a crypto‑draining scheme. Security telemetry shows that the domain appears on a single blocklist and has been flagged by 12 of 93 vendors on VirusTotal, indicating moderate detection consensus. PhishDestroy has actively taken the domain offline, and the current status is reported as offline. Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the domain’s legitimacy.

The combination of a crypto‑casino narrative, the Gambler Scam kit, and the low trust score aligns with the identified scam type of “Crypto Scam.” Uncertainty remains around the exact content served at the time of takedown, as the site is no longer reachable and no screenshots or content hashes have been released. Defenders should continue to block the domain at perimeter filters, update URL and domain reputation feeds, and monitor for any resurgence of the same IP address or similar Cloudflare‑hosted domains that reuse the Gambler Scam kit. Additional investigation of the hosting account and any associated subdomains may reveal further infrastructure used by the threat actor.