flarex[.]bet

Analysis as of July 24 2026 indicates that the domain flarex.bet is actively used for a crypto‑related phishing operation. The site resolves to IP 69.5.189.58, which is registered to an autonomous system (AS42624) owned by Global‑Data System IT Corporation and geolocated in Switzerland. The domain is hosted on NameCheap’s infrastructure, as evidenced by the registrar record. DNS resolution is serviced by four nameservers (ns1‑ns4.nameserverhub.com), a pattern commonly observed in disposable or fast‑flux setups. HTTP requests receive a 301 redirect, and the TLS certificate is issued by Let’s Encrypt (certificate identifier E7), confirming that transport encryption is present but does not imply legitimacy.

The page title “FLAREX | Play at the best online casino based on Blockchain” aligns with the “Gambler Scam” kit attributed to the site and matches the declared scam type of a crypto scam, suggesting the operator is targeting users interested in blockchain gaming. VirusTotal reports a single positive detection out of 95 scanned engines, indicating at least one security vendor has flagged the domain. The domain appears on one public blocklist and has been added to the PhishDestroy blocklist, reinforcing its malicious reputation. Scamadviser assigns a trust score of 1 / 100, reflecting an extremely low confidence in the site’s legitimacy.

No additional intelligence, such as Safe Browsing or OTX entries, is currently available, and the content of the landing page beyond the title has not been publicly analysed. Defenders should block DNS resolution for flarex.bet, enforce outbound filtering to prevent connections to 69.5.189.58, and monitor for any credential or cryptocurrency‑wallet submissions that reference the FLAREX brand. Incident response teams should treat any user‑reported interactions with this domain as compromised and advise affected users to change passwords and revoke any crypto tokens that may have been exposed.