olybet-hr[.]com

Analysis of the domain olybet-hr.com indicates active brand impersonation targeting the gambling and crypto casino sector, specifically leveraging the OlyBet brand as suggested by the page title 'OlyBet Online Casino Hrvatska: Odabir igara, Bonusi i Mobilno iskustvo.' The domain was registered on October 6, 2025, through GoDaddy.com, LLC and currently resolves to the IP address 172.67.137.116, which is associated with Cloudflare infrastructure. Detection data reveals the domain is flagged by 7 of 95 security vendors on VirusTotal and appears in 23 threat intelligence pulses on AlienVault OTX, alongside listings on two security blocklists. A trust score of 0/100 from Gridinsoft further corroborates its malicious classification. The domain is linked to the Gambler Scam phishing kit, a known framework for fraudulent gambling schemes, and is actively blocked by at least two security solutions. Infrastructure analysis reveals the use of PHP, IPinfo, and HTTP/3 technologies, alongside Cloudflare protection, which may complicate takedown efforts. The SSL certificate is issued by Google Trust Services, a common practice among both legitimate and malicious domains to evade basic security warnings. While the domain remains operational as of July 12, 2026, defenders should treat it as a high-risk asset due to its confirmed presence on multiple threat intelligence platforms and association with a known phishing kit. No legitimate affiliation with the OlyBet brand is established, and the domain should be prioritized for blocking at the network and endpoint levels. Further investigation into the hosting provider and registrar may aid in mitigation, though the use of Cloudflare may limit direct action against the underlying infrastructure.