revalux[.]bet

Analysis of the domain revalux.bet indicates it was actively impersonating the Blast brand, a known entity in the cryptocurrency or gaming sector, as of July 22, 2026. The domain was registered on February 21, 2026, through an undisclosed registrar and resolved to the IP address 57.129.97.29, hosted on AS16276 (OVH SAS) in Germany. The SSL certificate was issued under the E5 standard, and the page title displayed 'REVALUX | Enter the world of sport and stakes!', suggesting a focus on sports betting or gambling-related fraud. Detection data reveals minimal but targeted flagging: one security vendor (PhishDestroy) blocked the domain, and a single detection was recorded among 93 security vendors on VirusTotal.

Gridinsoft assigned a trust score of 0/100, further corroborating its suspicious nature. The domain appears on one security blocklist, though broader threat intelligence platforms such as Safe Browsing or OTX do not list it in available data. At the time of reporting, revalux.bet was offline, potentially due to takedown efforts or operational cessation by the threat actor. The scam type is classified as brand impersonation, specifically targeting Blast, though the exact mechanics of the fraud—whether involving credential harvesting, payment diversion, or cryptocurrency scams—remain unconfirmed due to limited forensic evidence.

Defenders should treat this domain as elevated risk, particularly organizations associated with Blast or similar brands in the gaming and cryptocurrency sectors. Monitoring for re-registration or re-emergence under similar domains (e.g., typosquatting variants) is recommended. Network defenders may also investigate the hosting IP 57.129.97.29 for additional malicious activity, given its association with OVH SAS, a provider frequently utilized for both legitimate and fraudulent operations.