flamebet[.]cc

The domain flamebet.cc was registered on 21 February 2026 through NiceNIC International Group Co., Limited and resolved to the Cloudflare‑managed address 104.21.79.183, which is associated with ASN 13335 (Cloudflare, Inc.) in the United States. The site was hosted behind Cloudflare and employed Cloudflare Browser Insights, Twitter Ads, and a Facebook Pixel, indicating use of third‑party tracking services. No TLS certificate was observed; the HTTPS handshake failed, and the service is currently offline. Security‑vendor scans on VirusTotal show that 15 of 93 AV engines flagged the domain as malicious, and the site is listed on one public blocklist. PhishDestroy has explicitly blocked the domain.

The page title retrieved during the brief crawl read “Flamebet: Elon Musk’s Official Crypto Casino Powered by Blockchain,” which aligns with the classified scam type “Crypto Scam” and the identified phishing kit “Gambler Scam.” Gridinsoft assigned a trust score of 0 out of 100, reinforcing the high‑risk assessment. The nameservers listed are craig.ns.cloudflare.com and malavika.ns.cloudflare.com, both standard Cloudflare resolvers. Analysis indicates that the infrastructure is typical of fast‑deployment phishing operations that leverage Cloudflare’s CDN to hide origin servers and to gain rapid global reach. The lack of a valid SSL certificate, combined with the offline status, suggests the site was taken down shortly after detection. However, the presence of tracking pixels and the specific branding in the title imply that the campaign targeted users interested in cryptocurrency gambling and attempted to exploit Elon Musk’s public profile.

Defenders should continue to block flamebet.cc at DNS and proxy layers, monitor the associated IP 104.21.79.183 for any future re‑use, and add the domain to internal threat‑intel feeds. Since the registrar is NiceNIC, investigators may request WHOIS records for additional attribution.