czplay[.]bet

This domain, czplay.bet, is flagged for brand impersonation targeting users of a blockchain-based online casino. The site presents itself as CZPLAY, claiming to offer gambling services on a decentralized platform. Analysis indicates the domain mimics legitimate crypto casino brands to deceive users into depositing cryptocurrency or disclosing account credentials. No direct evidence of a crypto drainer kit was observed, but the impersonation framework aligns with known phishing tactics in the gambling sector.

Technical indicators confirm elevated risk: the domain is detected by 9 out of 95 security vendors on VirusTotal, resolving to IP address 188.114.96.3 (AS13335, Cloudflare, Inc.). The domain was registered on February 21, 2026, under an SSL certificate labeled WE1. It appears on one security blocklist and is currently blocked by at least one threat intelligence feed. No Google Safe Browsing (GSB) detection was recorded at the time of analysis, though this may reflect delayed reporting rather than absence of risk.

As of the latest assessment, czplay.bet has been taken offline, likely due to enforcement actions or infrastructure disruption. However, residual risk remains due to the domain's recent registration and association with Cloudflare-hosted phishing campaigns. Organizations should monitor for re-emergence under altered infrastructure or similar domains. Users are advised to verify gambling platforms through official channels and avoid interacting with unsolicited crypto casino promotions, particularly those using blockchain or decentralized branding as a lure.