exspace[.]bet

On 21 February 2026 the domain exspace.bet was registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The authoritative nameservers are hunts.ns.cloudflare.com and simone.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. DNS resolution points to IP 172.67.129.189, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. The site does not present an SSL certificate, and HTTP requests return an offline status as of the report date, 23 July 2026.

The page title returned by the server reads “Exspace: Most Popular Online Crypto Casino Based on Blockchain”, matching the declared scam type of a crypto‑casino phishing operation. Analysis of the content attributes the site to the publicly known “Gambler Scam” phishing kit. Reputation scoring is extremely low; Gridinsoft assigns a trust score of 1 out of 100. The domain appears on one security blocklist and is actively blocked by the PhishDestroy service.

VirusTotal analysis shows that 16 of 95 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of a coordinated phishing campaign. The elevated risk rating is consistent with the combination of a brand‑impersonating page title, low trust score, multiple vendor detections, and the use of a reputable hosting provider to hide malicious infrastructure. Defenders should add exspace.bet to network and endpoint blocklists, monitor for any future resolution to Cloudflare IP ranges, and consider implementing URL filtering that references the identified phishing kit. Continuous telemetry on related domains using the same nameservers or hosting ASN is recommended to detect potential campaign expansion.