jullex[.]bet

jullex.bet was observed hosting a site titled “JULLEX | Enter the world of sport and stakes!” that claims to be associated with Ethereum and promotes a crypto gambling service. The domain resolves to the IPv4 address 57.129.97.29, which belongs to the OVH SAS network (AS16276) located in Germany. No TLS certificate is presented, indicating that the site was served over plain HTTP. The registration record lists the registrar as PDR Ltd. d/b/a PublicDomainRegistry.com, and the authoritative nameservers are lamar.ns.cloudflare.com and tori.ns.cloudflare.com, confirming the use of Cloudflare DNS. VirusTotal scans show that two out of ninety‑five security vendors flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reflecting a high level of malicious confidence.

The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. The overall risk assessment is elevated, and the current operational status is offline, which limits real‑time interaction but does not remove the threat of lingering infrastructure or phishing campaigns that may have cached the URL. Analysis indicates that the primary malicious intent is brand impersonation of Ethereum to lure victims into a cryptocurrency gambling scheme. The lack of SSL, low trust score, and vendor detections corroborate this classification.

However, the precise phishing kit, the content of the landing page, and any credential‑harvesting mechanisms have not been publicly disclosed, leaving those details uncertain. Defenders should continue to block the domain at perimeter filters, add the associated IP address to deny‑list rules, and monitor for any resurgence of the host on other domains within the same OVH AS.