hititbet1213[.]com

This domain hititbet1213.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. DNS resolution points to 185.178.208.132, an address announced by AS57724 (DDOS‑GUARD LTD) located in Russia. The authoritative name servers are ns1.ddos-guard.net and ns2.ddos-guard.net, indicating reliance on the DDOS‑GUARD infrastructure. No TLS certificate is presented, so all HTTP traffic would be unencrypted.

The site title returned by the HTTP response is “Hititbet”, and the listed scam type is Crypto Gambling, suggesting the domain was used to lure victims into a fraudulent gambling platform involving cryptocurrency. Operational status is currently offline, and the domain has been added to one security blocklist. PhishDestroy has explicitly blocked the domain, and VirusTotal records show that 2 of 95 scanned security vendors flagged it as malicious. The limited detection footprint implies that the malicious content was either short‑lived or not widely distributed before takedown.

Defenders should continue to monitor the associated IP address and the DDOS‑GUARD name servers for reuse, add the domain and IP to internal block lists, and consider extending coverage to related domains registered by the same registrar. Because the site lacks SSL, any future re‑deployment would be vulnerable to interception, but the primary risk remains the phishing payload and crypto‑gambling lure. At present, no additional indicators such as payload hashes or sinkhole data are available, so threat intel sharing should focus on the observed infrastructure and the two vendor detections.