betzone[.]top

The domain betzone.top was observed hosting a page titled “Betzone: Most Popular Online Crypto Casino Based on Blockchain”. The site resolved to the IP address 104.21.10.145, which belongs to AS13335 operated by Cloudflare, Inc., and is geolocated in the United States. Registration records show the domain was created on 13 January 2020 through Web Commerce Communications Limited, and the authoritative nameservers are cloe.ns.cloudflare.com and marek.ns.cloudflare.com. No TLS certificate was presented, indicating the site was served over plain HTTP at the time of capture.

VirusTotal analysis returned detections from 10 of 95 scanned security vendors, and the domain appears on a single external blocklist, confirming its malicious reputation. The hosting provider’s Gridinsoft trust score is 0 out of 100, reinforcing the low credibility of the infrastructure. PhishDestroy has already taken the site offline and listed it as a crypto‑scam using the “Gambler Scam” phishing kit, which aligns with the page title’s reference to a crypto casino. Because the site is currently offline, live content cannot be inspected, and the absence of a valid SSL certificate prevents verification of any subsequent changes to the service.

Defenders should immediately add betzone.top and its resolved IP 104.21.10.145 to network deny lists, enforce DNS blocking, and monitor for any rapid re‑registration or alternative hosting under the same registrar. Continuous monitoring of Cloudflare‑hosted IP ranges for similar crypto‑casino phishing patterns is advised, as the infrastructure reuse is common among financially‑motivated threat actors. In environments where outbound traffic to unknown crypto‑related domains is permitted, strict egress filtering should be applied to reduce exposure to this and related campaigns.