us[.]gala-games-enter-now-in[.]com

The domain us.gala-games-enter-now-in.com is a confirmed phishing site engaged in brand impersonation, specifically targeting Discord users. It presents itself as a legitimate Gala Games promotion but is designed to harvest login credentials or propagate social media scams. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate risk, but prior visitors may remain vulnerable to fraud or account compromise.

Technical analysis reveals limited detection: 1 of 95 VirusTotal security vendors flagged us.gala-games-enter-now-in.com as malicious, with Gridinsoft assigning a trust score of 0/100. The domain appears on one security blocklist (PhishDestroy) and was created on February 21, 2026. It resolved to IP address 190.115.18.12, hosted in Belize under AS59692 (IQWeb FZ-LLC), and used an SSL certificate issued by R3. The observed page title was 'Gala Games - Homepage', despite impersonating Discord, not Gala Games.

Users who interacted with us.gala-games-enter-now-in.com should immediately change their Discord passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent from your profile. Report the phishing domain to Discord’s official support channels and submit it to Google Safe Browsing, PhishTank, or other threat-intelligence platforms to aid in broader protection efforts.