rexys[.]bet

This domain, rexys.bet, is actively impersonating a legitimate blockchain-based crypto casino to deceive users into engaging with fraudulent gambling platforms. The site mimics the branding and promotional language of established crypto casinos, including claims of being the "Most Popular Online Crypto Casino Based on Blockchain," to lure victims into depositing cryptocurrency under false pretenses. Such brand impersonation schemes often lead to financial losses, as users may unknowingly transfer funds to attacker-controlled wallets or expose sensitive transaction details to malicious actors.

Analysis of the domain reveals multiple indicators of malicious activity. The domain was registered on November 30, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.), a network commonly used to obscure the true origin of phishing infrastructure. Security vendors on VirusTotal flagged the domain at a rate of 18/95, and it appears on at least one security blocklist, further corroborating its malicious classification. The absence of an SSL certificate also raises concerns about the domain's legitimacy and security posture.

Users who visited rexys.bet or interacted with its content should take immediate action to mitigate potential risks. First, revoke any cryptocurrency wallet permissions granted to the site, as these could be exploited for unauthorized transactions. Monitor all linked accounts for suspicious activity, including unexpected withdrawals or transfers. If cryptocurrency was deposited, document all transaction hashes and report the incident to relevant blockchain analysis platforms and law enforcement. Additionally, scan local devices for malware, as such domains may distribute malicious payloads under the guise of casino software or promotional downloads.