nepal1xbet[.]com

This domain, nepal1xbet.com, is actively flagged as a high-risk phishing infrastructure targeting users with fraudulent online gambling services, specifically crypto gambling. Registered on June 12, 2026, through SafeNames Ltd., the domain resolves to IP address 185.174.42.117, hosted by Silverhill Group Holding LTD in Seychelles. Infrastructure analysis reveals the use of CloudNS nameservers (dns51.cloudns.net, dns52.cloudns.net, dns53.cloudns.net, dns54.cloudns.net) and a Let's Encrypt SSL certificate issued under the identifier YE1, which does not inherently indicate malicious activity but is commonly exploited in phishing operations. The domain is currently active, returning an HTTP 302 redirect status, which is often leveraged in phishing campaigns to obscure the final destination or evade detection.

The page title, '1xBet Nepal - Online Sports Betting & Casino Site,' explicitly aligns with the reported scam type of crypto gambling, suggesting an attempt to impersonate or mimic legitimate betting platforms. While the exact content and functionality of the site remain unanalyzed, the combination of the page title, scam classification, and infrastructure details supports the assessment of a targeted phishing operation. Defenders should note that nepal1xbet.com appears on at least one security blocklist and has been included in two AlienVault OTX threat intelligence pulses, indicating prior detection by the security community. Twelve of ninety-one security vendors on VirusTotal flag the domain as malicious, though the absence of detections from other vendors does not imply safety.

The registrar, SafeNames Ltd., is not known for hosting a disproportionate volume of malicious domains, but this does not mitigate the risk posed by the domain itself. Recommended actions include blocking the domain and its associated IP (185.174.42.117) at the network level, monitoring for connections to the CloudNS nameservers, and alerting users to the presence of this threat.