hub[.]realbet[.]run

Analysis conducted on July 24, 2026 indicates that hub.realbet.run is currently offline but exhibits several indicators consistent with a crypto‑gambling phishing operation. The domain resolves to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc., confirming that the hosting is provided through Cloudflare's network. DNS records list the authoritative nameservers june.ns.cloudflare.com and nikon.ns.cloudflare.com, both typical of Cloudflare‑hosted zones. Registration details show the domain was created through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar commonly used for disposable or rapidly‑turned‑over domains. The site presented the page title “hub.realbet.io”, suggesting an attempt to masquerade as a sub‑domain of a legitimate betting platform, although no further branding was captured in the available data.

Technical fingerprints reveal the use of Bootstrap for layout, Cloudflare Browser Insights, and HTTP/3, all of which are standard services offered by the CDN. The SSL certificate is issued by Let’s Encrypt, providing valid HTTPS encryption but offering no assurance of legitimacy. A Gridinsoft trust score of 0 / 100 reflects an extremely low reputation rating. Independent scanning on VirusTotal recorded two detections out of ninety‑four security vendors, and the domain is listed on a single public blocklist. PhishDestroy has also flagged the site, reinforcing the malicious classification.

Given the offline status, direct content analysis is unavailable, leaving the exact phishing page structure unknown. However, the combination of a low trust score, multiple vendor detections, blocklist presence, and the explicit “Crypto Gambling” scam label strongly suggests that the domain was used to lure victims into fraudulent gambling schemes, potentially involving cryptocurrency payments.