czbnb[.]bet

Analysis of the domain czbnb.bet, as of the report date 23 July 2026, indicates that the site is currently offline but retains several high‑risk indicators. The domain resolves to the IP address 69.5.189.58, which is assigned to AS42624 Global-Data System IT Corporation and geolocated to Switzerland. The authoritative nameservers are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com, and ns4.nameserverhub, all of which are typical for low‑cost registrations. The registrar listed is NameCheap, Inc., a provider frequently used for rapid, disposable domain acquisition.

No SSL/TLS certificate is presented, leaving any traffic unencrypted and confirming the lack of legitimate security controls. The page title retrieved prior to takedown – “CZBNB | Play at the best online casino based on Blockchain” – explicitly advertises a blockchain‑based gambling service, aligning with the recorded scam type of “Crypto Scam.” The infrastructure matches a known “Gambler Scam” phishing kit, suggesting the site was intended to lure victims with promises of crypto casino winnings. Trust scoring services assign the domain a 1 / 100 rating on both Gridinsoft and Scamadviser, reflecting extreme suspicion. The domain has been added to at least one public security blocklist and is actively blocked by the PhishDestroy mitigation service.

VirusTotal analysis shows that 12 of 95 antivirus and URL‑filtering engines flagged the domain, reinforcing its malicious reputation. While the site is presently taken offline, the combination of a low‑reputation registrar, absence of TLS, a gambling‑oriented page title, low trust scores, blocklist presence, and multiple vendor detections collectively indicate a high probability of phishing or crypto‑draining activity. Defenders should continue to block the domain and its associated IP address at perimeter and endpoint layers, monitor for any re‑registration attempts, and consider adding the IP to threat‑intel feeds.