betring[.]site

betring.site is flagged by multiple security sources as a crypto‑focused phishing operation. The domain was registered on 2 October 2025 through Atak Domain and is served by Cloudflare name servers alexa.ns.cloudflare.com and lynn.ns.cloudflare.com. DNS resolution points to IP 172.67.165.10, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. The site presents no TLS certificate, indicating that HTTPS connections are not available.

According to PhishDestroy the site has been taken offline, and it currently returns no HTTP response, yet the historical page title “Betring: Most Popular Online Crypto Casino Based on Blockchain” matches the pattern of a crypto‑scam landing page. The underlying phishing kit has been identified as the Gambler Scam kit, a known template used to lure victims into fraudulent cryptocurrency gambling services. Security telemetry shows the domain appears on one public blocklist and has been flagged by 13 of 95 antivirus and URL‑reputation engines on VirusTotal, reinforcing its malicious classification. Trust scores are extremely low, with Gridinsoft reporting 0 / 100 and Scamadviser 1 / 100.

The combination of recent registration, lack of TLS, association with a known scam kit, and multiple vendor detections provides strong evidence that betring.site is being used for phishing and crypto‑draining activity. Defenders should immediately add the domain and its resolved IP address to deny lists, enforce TLS‑only outbound policies to block clear‑text connections, and monitor for any resurgence of the site or related domains that reuse the Gambler Scam kit. Continuous observation of Cloudflare‑hosted IP ranges for similar activity is advised, as threat actors often rotate hosts while retaining the same infrastructure patterns.