mellgame99[.]icu

This domain, mellgame99.icu, poses as an official online casino affiliated with Mellstroy, a known gambling brand, to deceive users into entering sensitive login credentials and financial information. The site specifically targets Russian-speaking users, as indicated by its page title in Cyrillic and the inclusion of the term 'онлайн-казино.' Such phishing operations typically harvest personal data for identity theft, unauthorized transactions, or further social engineering attacks. The fraudulent nature of this site is evident from its deceptive branding and the absence of legitimate licensing or regulatory compliance typical of genuine gambling platforms. Analysis indicates that this domain was registered on April 21, 2026, through NameSilo, LLC, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 85.121.149.84 and is hosted on an Nginx server, a common infrastructure choice for phishing sites due to its flexibility and performance. Security vendors have flagged this domain as malicious, with 5 out of 95 engines on VirusTotal detecting it as a threat. Additionally, it holds a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100, further confirming its fraudulent intent. The domain is also blocked by at least one security blocklist, reinforcing its classification as a high-risk entity. Users who have visited mellgame99.icu or entered any information on the site should take immediate action to mitigate potential risks. First, disconnect the affected device from the internet to prevent further data transmission. Run a full system scan using updated security software to detect and remove any malware or malicious scripts that may have been installed. Change passwords for all accounts accessed from the compromised device, prioritizing financial and email accounts, and enable multi-factor authentication where possible. Monitor bank statements and credit reports for unauthorized transactions or signs of identity theft. If financial information was entered, contact the relevant institution to report potential fraud and request account monitoring or freezing. Finally, report the domain to local cybersecurity authorities or consumer protection agencies to aid in broader efforts to disrupt such phishing operations.