benobet[.]org

Analysis indicates that benobet.org was registered on December 9, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and currently resolves to the Cloudflare address 104.21.85.245, identified as AS13335 in the United States. The site’s sole page title, “Benobet: Most Popular Online Crypto Casino Based on Blockchain,” aligns with the classified scam type “Crypto Scam” and matches the known Gambler Scam phishing kit. VirusTotal scans show that nine of ninety‑three antivirus engines flagged the domain, providing independent confirmation of malicious intent.

The domain appears on one public security blocklist and is actively blocked by the PhishDestroy service, reinforcing its reputation as a phishing vector. Reputation services assign extremely low scores: Gridinsoft rates the domain 0 out of 100 and Scamadviser rates it 11 out of 100, both indicating a high likelihood of fraud. The SSL certificate is identified only as “WE1,” which is not a recognized trusted authority and further reduces confidence in the site’s legitimacy.

Although the domain has been taken offline at the time of this assessment, the infrastructure components—including the Cloudflare edge IP and the registrar—remain observable and could be reused for future campaigns. Defenders should continue to monitor DNS resolutions for the 104.21.85.245 address, enforce blocklist entries for benobet.org across web filters, and consider adding the domain to internal threat intel feeds. Given the combination of low trust scores, detection by multiple vendors, and association with a known gambling‑related phishing kit, any inbound traffic to benobet.org should be treated as malicious and blocked until the domain is definitively taken down.