eazybet[.]cc

PhishDestroy identifies the domain eazybet.cc as an active crypto drainer campaign impersonating a gaming or betting brand, currently under investigation as a generic phishing threat. The domain was registered on November 23, 2025, and is hosted on IP 104.21.75.156. The threat actor is likely deploying a crypto drainer kit to siphon cryptocurrency from unsuspecting users through fraudulent login or transaction prompts. No specific brand has been confirmed; however, the domain name suggests a focus on gambling or betting-related impersonation, targeting users familiar with platforms using similar naming conventions.

This domain exhibits several notable technical indicators consistent with emerging phishing infrastructure. VirusTotal currently reports 9/95 detection engines flagging eazybet.cc, indicating it remains under the radar of mainstream security vendors. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar known for accommodating both legitimate and malicious registrations. The SSL certificate is issued by Google Trust Services, which may be abused to lend false legitimacy to the site. The domain resolves to IP 104.21.75.156, a Cloudflare IP address that may be used to obfuscate hosting infrastructure. The domain is only 0 days old as of detection, reducing the window for historical reputation-based blocking. Google Safe Browsing (GSB) has not yet blacklisted this domain, and aggregate blocklist data shows zero prior detections, confirming its novelty and elevated risk profile.

As of this report, the domain eazybet.cc is classified as active, with the campaign status under investigation. The low detection rate and recent registration suggest an early-stage operation, likely targeting cryptocurrency holders interested in betting or gaming platforms. PhishDestroy has flagged this domain with unique seed identifier a99719 and assigned a current status of under_investigation, indicating ongoing analysis. Users are strongly advised to avoid interacting with this domain and to verify any suspicious links using PhishDestroy’s real-time scanning tool. The remaining risk is assessed as high due to the domain’s novelty, lack of blocklist presence, and the potential deployment of a crypto drainer kit. Proactive blocking at the network level is recommended, and users should exercise heightened caution when encountering links or advertisements referencing eazybet or similar gaming-themed domains.