biybet[.]com

biybet.com was registered on September 22 2025 through Name SRS AB and immediately pointed to the Cloudflare edge address 172.67.174.126, which is associated with AS13335 Cloudflare, Inc. in the United States. The domain resolves to two Cloudflare authoritative name servers (lex.ns.cloudflare.com and tegan.ns.cloudflare.com) and does not present an SSL/TLS certificate, leaving HTTP connections unencrypted. The only content retrieved before the site was taken offline was a page titled “Biybet: Most Popular Online Crypto Casino Based on Blockchain,” which aligns with the listed scam type of a crypto‑focused gambling scheme. Analysis of the site’s infrastructure indicates the use of the publicly available “Gambler Scam” phishing kit, a package frequently employed to harvest cryptocurrency credentials and lure victims with false casino promotions.

The site has been flagged by multiple defensive services: PhishDestroy lists it as blocked, a single security blocklist also contains the domain, and AlienVault’s Open Threat Exchange recorded the domain in one threat‑intel pulse. Reputation services assign extremely low trust scores—Gridinsoft 0/100 and Scamadviser 1/100—reinforcing the malicious assessment. VirusTotal scans show that 10 of 93 antivirus engines flagged the domain, confirming the presence of malicious components. The domain’s current HTTP status is offline, preventing further live analysis, and no HTTPS certificate was observed, which limits any potential for secure data exfiltration but also suggests the operators did not invest in encryption.

Uncertainty remains regarding the exact payload delivered to victims, as the offline status precludes capture of any download or redirect behavior. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists with the observed IP address and name servers, and monitor for any resurgence of the same infrastructure under new subdomains.