racy[.]bet

This domain, racy.bet, is confirmed to operate as a brand impersonation scam specifically targeting users of cryptocurrency-based gambling platforms. Analysis indicates the site mimics legitimate online crypto casinos by presenting itself as a blockchain-powered gambling service, complete with false claims of popularity and security. The page title, 'Racy: Most Popular Online Crypto Casino Based on Blockchain,' directly aligns with tactics used to deceive users into believing they are interacting with a trusted gambling platform. The primary threat posed by this domain involves credential harvesting, cryptocurrency theft, and financial fraud, as users may be tricked into depositing funds or sharing sensitive wallet information under false pretenses.

Technical evidence supports the classification of racy.bet as a malicious entity. The domain was registered on February 21, 2026, and resolves to the IP address 172.67.184.239, hosted on infrastructure belonging to AS13335 (Cloudflare, Inc.). VirusTotal detection rates show that 17 out of 95 security vendors flag this domain as malicious, while it also appears on at least one security blocklist. The SSL certificate is issued under the WE1 root, a common but not exclusive indicator of low-trust or ephemeral domains. Infrastructure analysis reveals the use of Cloudflare services, which are frequently leveraged by threat actors to obscure the true origin of malicious sites and evade takedown efforts.

Users who visited racy.bet should take immediate action to mitigate potential risks. If any credentials, wallet addresses, or financial information were entered, affected individuals should revoke access to any linked cryptocurrency wallets and monitor accounts for unauthorized transactions. It is recommended to scan local devices for malware, as phishing sites may deploy additional payloads. Users should also report the domain to relevant financial institutions or cryptocurrency platforms to assist in broader fraud prevention efforts. Given the elevated risk level, continued vigilance is advised, particularly for those who engaged with the site under the assumption of legitimacy.