jelavo[.]com
“Jelavo: Most Popular Online Crypto Casino Based on Blockchain”
Résumé des preuves
On July 24, 2026 analysts observed that the domain jelavo.com was taken offline but left a forensic trail consistent with a crypto‑focused phishing campaign. The site previously presented the page title "Jelavo: Most Popular Online Crypto Casino Based on Blockchain," suggesting an attempt to lure victims with a cryptocurrency gambling premise. Registration data shows the domain was created on August 27, 2025 through Web Commerce Communications Limited, and it resolves to the Cloudflare‑owned address 188.114.97.3 (AS13335, United States). The domain uses Cloudflare’s default nameservers daniella.ns.cloudflare.com and vin.ns.cloudflare.com, indicating reliance on a reputable content‑delivery network to mask the true hosting location.
No SSL certificate was detected, meaning the site offered only HTTP connections, a characteristic often exploited to avoid the overhead of certificate management in short‑lived campaigns. The infrastructure received a Gridinsoft trust score of 0 / 100 and appears on a single security blocklist, reinforcing its malicious intent. PhishDestroy has already blocked the domain, and VirusTotal analysis recorded eight detections out of ninety‑five scanners, confirming that multiple security vendors flagged the site as malicious. The phishing kit identified as “Gambler Scam” aligns with the casino‑themed lure indicated by the page title.
While the site is currently offline, defenders should continue to deny any network traffic to 188.114.97.3 and monitor for newly registered domains that use the same registrar or similar naming patterns. Additional vigilance is advised for any HTTP‑only services that reference crypto gambling, as they may be part of the same campaign infrastructure.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif