cryptax[.]bet

Analysis of the domain cryptax.bet, observed as offline at the time of reporting (23 July 2026), indicates multiple indicators of malicious activity. The domain was registered on 6 December 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is hosted on Cloudflare’s network (ASN 13335) with the IPv6 address 2606:4700:3036::ac43:a56d, locating the infrastructure in the United States. No TLS certificate is present, meaning connections to the site would be unencrypted, a common characteristic of phishing infrastructure. The authoritative name servers are ashton.ns.cloudflare.com and cora.ns.cloudflare.com, both belonging to Cloudflare, confirming the use of the provider’s DNS services.

Reputation checks show that 13 of 93 antiviruses on VirusTotal flagged the domain, and it appears on a single external blocklist. PhishDestroy has explicitly blocked the domain, and Gridinsoft assigns a trust score of 0 out of 100, indicating a high confidence of abuse. The page title returned by the site—“Cryptax: Most Popular Online Crypto Casino Based on Blockchain”—matches the scam type recorded as “Crypto Scam” and aligns with the known “Gambler Scam” phishing kit, suggesting the site was intended to lure victims with a counterfeit cryptocurrency gambling offering. The combination of a recent registration, Cloudflare‑based hosting, lack of SSL, low trust rating, and detection by multiple security vendors strongly supports the classification of cryptax.bet as a crypto‑related phishing operation.

However, because the site is currently offline, live content cannot be examined, and the exact phishing flow, credential collection mechanisms, or any associated command‑and‑control endpoints remain unknown. Defenders should continue to block cryptax.bet at perimeter and DNS filters, monitor for any re‑hosting of the same kit on other domains, and watch for traffic to the identified IPv6 address.