vistbet[.]com

Analysis indicates that the domain vistbet.com was registered on 1 December 2025 through MAT BAO CORPORATION and resolves to the IPv6 address 2606:4700:3033::ac43:8e06, which belongs to Cloudflare's AS13335 network located in the United States. The domain is hosted behind Cloudflare and uses the nameservers isla.ns.cloudflare.com and zahir.ns.cloudflare.com. No TLS certificate is presented, leaving the site without HTTPS protection. The public page title advertises “Vistbet: Most Popular Online Crypto Casino Based on Blockchain,” aligning with the classified scam type of a crypto‑focused gambling scheme.

Infrastructure analysis shows a Gridinsoft trust score of 1 out of 100, indicating an extremely low reputation. VirusTotal reports that 13 of 95 scanned security vendors flag the domain, reinforcing malicious intent. The site has been added to at least one security blocklist and is actively blocked by the PhishDestroy service. Forensically, the payload appears to be built from the publicly known “Gambler Scam” phishing kit, a template commonly used to lure victims into fraudulent cryptocurrency casino offerings.

The domain is currently offline, but the observed indicators suggest a short‑lived operation typical of high‑volume phishing campaigns. Defenders should continue to block the domain and its associated IPv6 address at perimeter firewalls and DNS filtering solutions, ensure that any existing allow‑list entries for Cloudflare‑hosted services are reviewed, and monitor for re‑registration attempts or new sub‑domains using the same registrar or nameserver configuration. Ongoing threat‑intel feeds should be consulted for any emergence of similar “Gambler Scam” kits targeting crypto casino victims, and incident response teams should treat any traffic to vistbet.com as malicious.