griezmannbet[.]com

PhishDestroy identifies griezmannbet.com as a generic phishing domain masquerading as a crypto casino, specifically leveraging an impersonation of Antoine Griezmann’s branding to promote a fraudulent blockchain-based gambling platform.

Technical analysis reveals this domain was registered on April 01, 2026, through Fewmoretaps OU (d/b/a Trustname.com) and resolves to IP 104.21.67.50. The domain operates with a Let’s Encrypt SSL certificate and currently shows zero detections (5/95) on VirusTotal, indicating it has not yet been widely flagged by security vendors. Additionally, the site remains unblocked by Google Safe Browsing (GSB) and has not been listed on major threat intelligence blocklists, suggesting a relatively new or stealthy campaign.

While the domain is still active and propagating, preliminary analysis confirms it aligns with crypto drainer tactics, aiming to deceive users into connecting wallets or depositing funds under false pretenses. No drainer kit artifacts have been publicly documented yet, but the low VT score and fresh registration date warrant heightened scrutiny. PhishDestroy advises users to avoid interaction and organizations to monitor for IOCs (IP 104.21.67.50, domain griezmannbet.com) while assessing potential exposure. Remaining risk is classified as under_investigation due to the absence of widespread detections and the domain’s recent emergence.