vatanbet[.]co

The domain vatanbet.co was registered on February 21, 2026 through NameCheap, Inc. and resolves to the IPv6 address 2606:4700:3034::6815:5caf, which is announced by AS13335 Cloudflare, Inc. in the United States. The authoritative name servers are dns101.registrar-servers.com and dns102.registrar-servers.com, indicating the use of a standard registrar‑provided DNS service. HTTP analysis shows the site is powered by Nginx with the OpenResty module, a common stack for web applications. The page title returned from the host reads "بكس بت (BaxBet) | پیشرفته ترین سایت پیش بینی و کازینو," confirming the site’s self‑identification as a Persian‑language gambling portal. The SSL certificate is identified as WE1, though no further certificate details are available.

Security telemetry flags vatanbet.co as a crypto gambling scam. Five of ninety‑three VirusTotal scanners have reported malicious activity, and the domain appears on a single security blocklist. PhishDestroy has also listed the domain as blocked, and Gridinsoft assigns it a trust score of 0 out of 100, indicating a high confidence of malicious intent. The site is currently offline, which may represent takedown or temporary suspension.

While the available evidence strongly suggests the domain is being used for fraudulent gambling operations, the limited number of blocklist entries and modest VirusTotal detection count leave some uncertainty about the scale of active abuse. No additional indicators such as phishing kit signatures or compromised credentials have been disclosed. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated IPv6 address, and consider adding the domain to internal blacklists. Ongoing threat‑intel feeds should be consulted for any future re‑hosting or emerging indicators linked to vatanbet.co.