xertabet[.]com

On July 23, 2026, analysts observed that the domain xertabet.com was registered on 21 February 2026 through Hello Internet Corp. The site was hosted on Cloudflare infrastructure, resolving to IP 172.67.215.146, which is announced by AS13335 (Cloudflare, Inc.) and geolocated to the United States. No TLS certificate was presented, indicating the service was delivered over plain HTTP. The page title retrieved during the brief live window read “Xertabet: Elon Musk’s Official Crypto Casino Powered by Blockchain,” and the domain was explicitly associated with the brand target “sei,” suggesting a brand‑impersonation component. The content was identified as a “Crypto Scam” and linked to the publicly known Gambler Scam phishing kit.

Threat‑intel aggregators flagged the domain on a single security blocklist and it was also listed by the PhishDestroy sinkhole. The single blocklist entry originates from a community‑maintained phishing feed, and the PhishDestroy block indicates that the domain was actively served to crawlers before takedown. VirusTotal analysis recorded 16 of 93 AV engines labeling the host as malicious, reinforcing the suspicion of malicious intent. Independent reputation scoring from Gridinsoft assigned a trust score of 1 out of 100, the lowest possible rating. The nameservers listed were alexandra.ns.cloudflare.com and plato.ns.cloudflare.com, both belonging to Cloudflare’s DNS service.

As of the report time the domain is taken offline, which limits immediate exposure but does not remove the underlying infrastructure. Defensive operators should add xertabet.com to URL filtering and DNS block lists, monitor for re‑registration or similar domains using the same registrar or Cloudflare IP range, and enforce strict verification of any communications that reference SEI or cryptocurrency casino offers.