vesbet[.]cc

Analysis conducted on 25 July 2026 identifies vesbet.cc as a newly registered (26 February 2026) phishing infrastructure targeting cryptocurrency casino users. The domain resolves to 188.114.97.3, an address owned by Cloudflare (ASN 13335) located in the United States. No TLS certificate is presented, indicating the site was served over plain HTTP at the time of capture. The registrar listed is NiceNIC International Group Co., Limited and the authoritative name servers are alex.ns.cloudflare.com and vita.ns.cloudflare.com, both Cloudflare‑managed.

The page title observed in the last crawl reads “Vesbet: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the scam type recorded as “Crypto Scam”. The infrastructure matches the Gambler Scam phishing kit, a known template used to lure victims into credential or wallet theft. VirusTotal analysis recorded 11 positive detections out of 93 scanning engines, and the domain appears on a single public blocklist. PhishDestroy has also taken the site offline and listed it as blocked.

Because the site is currently offline, direct content inspection was not possible, leaving the exact malicious payload unverified. Nevertheless, the combination of registrar data, Cloudflare hosting, lack of encryption, and multiple security vendor flags constitute strong evidence of a credential‑stealing operation. Defenders should add 188.114.97.3 to network‑level deny lists, enforce blocking of the FQDN vesbet.cc in web filtering solutions, and monitor for any future re‑hosting of the same kit on other Cloudflare‑assigned IP ranges. Continuous re‑scanning of the domain is recommended should it reappear online, and any emails referencing Vesbet or crypto casino promotions should be treated as suspicious.