spiff[.]bet

The domain spiff.bet was registered on February 21, 2026 and is currently listed as taken offline. The site presented the page title "Spiff: Most Popular Online Crypto Casino Based on Blockchain," indicating a cryptocurrency‑focused lure. Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which is hosted in the United States under autonomous system AS13335 owned by Cloudflare, Inc. The SSL certificate associated with the domain is identified as WE1, confirming that TLS was in use at the time of observation.

Malware and URL reputation scanning on VirusTotal recorded 15 positive detections out of 93 security vendors, reflecting a moderate level of consensus among scanners that the domain is malicious. The domain is also listed on a single security blocklist and has been actively blocked by the PhishDestroy service, reinforcing its classification as a phishing threat. Threat intelligence attributes the site to the "Gambler Scam" phishing kit, a known template used to target users interested in online gambling and cryptocurrency services.

The overall scam type is recorded as a Crypto Scam, aligning with the page title’s emphasis on a blockchain‑based casino. Defenders should immediately block network traffic to both the domain spiff.bet and its resolving IP 188.114.97.3, update intrusion detection signatures with the observed SSL fingerprint, and monitor for any related indicators of compromise that may originate from the same Cloudflare hosting range. Continuous monitoring of VirusTotal and blocklist updates is recommended to capture any changes in detection rates or additional listings.